North Korea stole more than 2 trillion won ($1.36 billion) in virtual assets last year, a record haul that came as its hackers broadened attacks from crypto platforms to South Korea’s defense, IT and software supply chains.

The findings were disclosed Sunday in the National Intelligence Service’s annual cybersecurity threat and response report, published by its National Cyber Security Center.

Corporate software supply chains were among the targets. North Korean hackers exploited vulnerabilities in three domestic document management solutions to create administrator accounts and steal data, with leaked sensitive files ranging from at least 700 to as many as 2.6 million by product.

The report also said Andariel,…