A compromised device infected with infostealer malware has provided a glimpse into the inner workings of a North Korean cybercrime ring. The leak, which came from an internal payment system called WebMsg, shows that over $3.5 million in cryptocurrency was processed since November 2025.