DPRK operations
State-aligned activity targeting digital asset businesses: social engineering campaigns, tooling and delivery methods, and the laundering routes that follow.
Independent threat intelligence practice · Singapore
Intelligence on the threat actors operating in crypto.
Pangolin Intelligence produces intelligence on the cyber threat actors operating in crypto: DPRK operations, organised cybercrime and large-scale fraud networks. We cover how they operate, the infrastructure and tooling they use, and how stolen funds move.
Led bytanuki42@tanuki42_
We don't build tooling. We produce the intelligence that goes into it.
Coverage
Principal areas of focus
Organised cybercrime
Social engineering at scale, including support-desk impersonation, SIM swaps and account takeover, and the criminal service economy that supports it.
Large-scale fraud networks
Industrialised investment and social engineering fraud, the infrastructure that sustains it, and the movement of proceeds through the wider ecosystem.
Threat briefings
Know your adversary. Intelligence is armour.
Briefings for boards, security teams and financial-crime teams on the actors targeting crypto: who they are, how they operate, who they choose, what it looks like when they come for you, and where the money goes afterwards.
What we do
Intelligence, advisory and training
Intelligence
Research subscriptions and attribution datasets, licensed to threat intelligence platforms, analytics providers, exchanges and security teams.
- Threat actor profiles, TTPs and infrastructure mapping
- Entity and cluster attribution
- Attacker infrastructure, tooling and delivery methods
- Periodic intelligence briefings and alerts
Advisory
Technical analysis and advisory for organisations, security firms and law firms.
- On-chain analysis and attribution
- Assessment of threat actor activity and exposure
- Technical reporting for internal governance and counsel review
Training
Practical upskilling delivered directly to in-house analyst, security and compliance functions.
- Threat briefings for security and leadership teams
- Workshops on tracing methods, attribution and analytical tradecraft
- Analyst upskilling for financial crime and compliance teams
Who uses our work
Security firms and threat intelligence platforms
Actor profiles, tradecraft and indicators for their own products and client work.
Exchanges and blockchain analytics
Typologies, laundering routes and attribution for compliance and financial-crime teams.
Law enforcement and law firms
Technical intelligence and briefings on the actors and typologies that appear in the matters they handle.
The researcher
Pangolin Intelligence is led by tanuki42, a pseudonymous crypto security researcher and SEAL 911 contributor.
Contact
Get in touch.
Briefings, intelligence and advisory enquiries from organisations.
Hacked or scammed? Pangolin doesn't take on individual cases. Get free help from SEAL 911 and report it to the police.
We support
Scope of services
Pangolin Intelligence Pte. Ltd. provides technical, analytical and advisory services focused on blockchain data analysis and threat intelligence. We do not operate a cryptocurrency exchange or trading platform, provide custody or manage client assets, issue tokens or NFTs, operate DeFi protocols, or provide remittance or payment services, and we do not perform licensable cybersecurity services such as penetration testing or managed SOC monitoring. We act for organisations only and do not provide private investigation services.