DPRK operations
State-aligned activity targeting digital asset businesses — social engineering campaigns, tooling and delivery methods, and the laundering routes that follow.
Independent threat intelligence practice · Singapore
Intelligence on the threat actors operating in crypto.
Pangolin Intelligence produces intelligence on the cyber threat actors operating in crypto — DPRK operations, organised cybercrime and large-scale fraud networks — covering how they operate, the infrastructure and tooling they use, and how stolen funds move.
We don't build tooling.
We produce the intelligence that goes into it.
Our work is used by threat intelligence platforms, security firms, exchanges, analytics providers and law enforcement. We also publish independent public-interest research.
Coverage
Principal focusOrganised cybercrime
Social engineering at scale — support-desk impersonation, SIM swaps and account takeover — and the criminal service economy that supports them.
Large-scale fraud networks
Industrialised investment and social engineering fraud, the infrastructure that sustains it, and the movement of proceeds through the wider ecosystem.
These are our principal areas of focus, not the limit of our coverage.
What we do
Intelligence · Advisory · TrainingIntelligence
Research subscriptions and attribution datasets, licensed to threat intelligence platforms, analytics providers, exchanges and security teams.
- Threat actor profiles, TTPs and infrastructure mapping
- Entity and cluster attribution
- Attacker infrastructure, tooling and delivery methods
- Periodic intelligence briefings and alerts
Advisory
Technical analysis and advisory for organisations, security firms and law firms.
- On-chain analysis and attribution
- Assessment of threat actor activity and exposure
- Technical reporting for internal governance and counsel review
Training
Practical upskilling delivered directly to in-house analyst, security and compliance functions.
- Analyst upskilling for financial crime and compliance teams
- Workshops on tracing methods, attribution and analytical tradecraft
- Threat briefings for security and leadership teams
Who uses our work
- Threat intelligence platforms
- Security firms
- Exchanges & digital asset businesses
- Blockchain analytics providers
- Law enforcement
- Law firms
How we operate
Clients
Pangolin works with organisations, security firms, platforms and law firms. We do not take instructions directly from private individuals and do not provide private investigation services.
Method
We prioritise auditability: transparent assumptions, reproducible analysis, and reporting structured for internal governance, counsel review and external compliance needs.
Compliance statement
We do not operate a cryptocurrency exchange or trading platform, provide custody or manage client assets, issue tokens/NFTs, operate DeFi protocols, or provide remittance/payment services. We also do not perform licensable cybersecurity services such as penetration testing or managed SOC monitoring. All services are technical, analytical and advisory in nature, focused on blockchain data analysis and threat intelligence.
Company & contact
- Entity
- Pangolin Intelligence Pte. Ltd.
- UEN
- 202551205W
- Registered office
- 160 Robinson Road #14-04
Singapore 068914
- General
- hello@pangolinintelligence.com
- Billing
- billing@pangolinintelligence.com
- Data protection
- privacy@pangolinintelligence.com