I've posted before on North Korea and their efforts to acquire BTC and other cryptos
Bloomberg with a bit more, an interesting read:
- A hacking unit called Andariel seized a server at a South Korean company
- Used it to mine about 70 Monero coins
- The hackers may have seized other computers to mine cryptocurrencies and appear to prefer Monero because the currency is more focused on privacy and easier to hide and launder than bitcoin