Attempts have been taking place as recently as November, but Secureworks' analysts saw activity as early as 2016. The organization adds that the campaign is likely still going, and that this is a preliminary report. You may get a better sense of the scope in the future.

It's easy to see why Lazarus would try a campaign like this. It has already conducted money-grabbing efforts like the 2016 bank attack that swiped $81 million, and taking even a handful of bitcoins could reap a windfall when just one is worth roughly $19,400 as of this writing. North Korea could spend relatively little effort to swipe a lot of money and circumvent the many sanctions that prevent money from flowing in.