Pyongyang has been suspected of several attacks, including ransomware, the 2017 WannaCry attack and others in South Korea and nearby entities. The FBI is concerned that nations under sanction could be using malicious cyber activity to keep cash flowing in the absence of traditional sources.