Ripple gives DPRK-linked threat intel to Crypto ISAC, sharing malicious wallets, domains and insider profiles

Ripple announced it will share exclusive threat intelligence on campaigns linked to North Korea with the Crypto ISAC, aiming to help crypto firms identify hiring and insider-access risks and respond more quickly to related cyber threats ^{[1] [2]}.

The shared data reportedly includes lists of fraud-linked crypto wallets and malicious domains, plus context-rich profiles that contain emails, LinkedIn accounts and behavioral indicators tied to DPRK campaigns ^{[3] [4]}.

Crypto ISAC launched a new API so members can integrate the threat feeds into their security systems, and firms including Coinbase have adopted the updated API to strengthen their security operations ^{[3] [2]}.

Ripple and industry partners say the initiative is intended to strengthen defenses across the crypto sector and reduce the effectiveness of North Korea–linked cyber operations ^{[2] [1]}.