"The Women Behind North Korea's IT Worker Operations" published by HaydenMckenzie. #ITWorker https://haydenmckenzie.com/research/dprk-it-worker-cell-part-one
The Women Behind North Korea's IT Worker Operations
haydenmckenzie.com
September 26, 2026 at 1:24 AM
"The Women Behind North Korea's IT Worker Operations" published by HaydenMckenzie. #ITWorker https://haydenmckenzie.com/research/dprk-it-worker-cell-part-one
"The DPRK’s Use of Overseas Labour to Violate and Evade UN Sanctions" published by MSMT. #Sanctions, #ITWorker, #MoneyLaundering https://msmt.info/Publications/detail/MSMT%20Report/4232
The DPRK’s Use of Overseas Labour to Violate and Evade UN Sanctions
msmt.info
September 17, 2026 at 2:48 PM
"The DPRK’s Use of Overseas Labour to Violate and Evade UN Sanctions" published by MSMT. #Sanctions, #ITWorker, #MoneyLaundering https://msmt.info/Publications/detail/MSMT%20Report/4232
"Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord Servers" published by Silentpush. #ITWorker https://www.silentpush.com/blog/nk-it-worker
Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord Servers
www.silentpush.com
September 16, 2026 at 11:59 PM
"Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord Servers" published by Silentpush. #ITWorker https://www.silentpush.com/blog/nk-it-worker
"SEAL weekly stats: Sept. 8-14, 2026" published by SecurityAlliance. #Trend, #ContagiousInterview, #ITWorker, #SINT01 https://radar.securityalliance.org/seal-weekly-stats-sept-8-14-2026
SEAL weekly stats: Sept. 8-14, 2026
radar.securityalliance.org
September 16, 2026 at 12:18 AM
"SEAL weekly stats: Sept. 8-14, 2026" published by SecurityAlliance. #Trend, #ContagiousInterview, #ITWorker, #SINT01 https://radar.securityalliance.org/seal-weekly-stats-sept-8-14-2026
Learn how researchers exposed a North Korean IT worker using Discord to steal identities, conduct fraudulent interviews, and establish remote laptop farms.
#NorthKorea #ITWorker #DiscordScam #CyberSecurity #IdentityTheft
#NorthKorea #ITWorker #DiscordScam #CyberSecurity #IdentityTheft
Unmasking a North Korean IT Worker Scam on Discord
Researchers at Silent Push successfully exposed a suspected North Korean IT worker actively scouring Discord to recruit foreigners. The objective was to orchestrate fraudulent job interviews and secure remote employment using stolen identities. The operator offered intermediaries a highly lucrative proposition: impersonate the candidate during interviews, funnel the salary into their personal account, retain a 35% commission, and transfer the remaining 65% to the scheme's mastermind.
securityexpress.info
September 15, 2026 at 2:12 PM
Learn how researchers exposed a North Korean IT worker using Discord to steal identities, conduct fraudulent interviews, and establish remote laptop farms.
#NorthKorea #ITWorker #DiscordScam #CyberSecurity #IdentityTheft
#NorthKorea #ITWorker #DiscordScam #CyberSecurity #IdentityTheft
"Now recruiting: North Korea looks abroad for talent in its scheme to infiltrate U.S. companies" published by NBCNews. #News, #ITWorker, #MoneyLaundering https://www.nbcnews.com/tech/security/north-korea-worker-scheme-recruits-abroad-rcna596873
Now recruiting: North Korea looks abroad for talent in its scheme to infiltrate U.S. companies
www.nbcnews.com
September 14, 2026 at 11:31 AM
"Now recruiting: North Korea looks abroad for talent in its scheme to infiltrate U.S. companies" published by NBCNews. #News, #ITWorker, #MoneyLaundering https://www.nbcnews.com/tech/security/north-korea-worker-scheme-recruits-abroad-rcna596873
"GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI" published by Google. #Trend, #ITWorker, #MidnightNeptune https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai
GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI
cloud.google.com
September 9, 2026 at 3:29 AM
"GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI" published by Google. #Trend, #ITWorker, #MidnightNeptune https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai
"Beyond Lazarus: Organization of DPRK Cyber Capabilities" published by KudelskiSecurity. #APT38, #Andariel, #Kimsuky, #CryptoCore, #TEMPHermit, #JadeSleet, #CitrineSleet, #ITWorker, #MoonstoneSleet, #Lazarus https://kudelskisecurity.com/research/beyond-lazarus-organization-of-dprk-cyber-capabilities
Beyond Lazarus: Organization of DPRK Cyber Capabilities
kudelskisecurity.com
September 7, 2026 at 10:16 AM
"Beyond Lazarus: Organization of DPRK Cyber Capabilities" published by KudelskiSecurity. #APT38, #Andariel, #Kimsuky, #CryptoCore, #TEMPHermit, #JadeSleet, #CitrineSleet, #ITWorker, #MoonstoneSleet, #Lazarus https://kudelskisecurity.com/research/beyond-lazarus-organization-of-dprk-cyber-capabilities
"Insights into Suspected DPRK Workers: Red Flags to Look Out For" published by Huntress. #ITWorker, #FamousChollima, #PiKVM, #Guermok https://www.huntress.com/blog/huntress-dprk-remote-worker-investigation
Insights into Suspected DPRK Workers: Red Flags to Look Out For
www.huntress.com
August 27, 2026 at 4:56 AM
"Insights into Suspected DPRK Workers: Red Flags to Look Out For" published by Huntress. #ITWorker, #FamousChollima, #PiKVM, #Guermok https://www.huntress.com/blog/huntress-dprk-remote-worker-investigation
"Insights into Suspected DPRK Workers: Red Flags to Look Out For" published by Huntress. #ITWorker, #FamousChollima, #PiKVM, #Guermok https://www.huntress.com/blog/huntress-dprk-remote-worker-investigation
Insights into Suspected DPRK Workers: Red Flags to Look Out For
www.huntress.com
August 27, 2026 at 4:54 AM
"Insights into Suspected DPRK Workers: Red Flags to Look Out For" published by Huntress. #ITWorker, #FamousChollima, #PiKVM, #Guermok https://www.huntress.com/blog/huntress-dprk-remote-worker-investigation
"Nation-State Hiring Fraud: Fake IT Workers, Laptop Farms, and Background-Check Blind Spots" published by Abnormal. #ITWorker, #Deepfake https://www.abnormal.ai/blog/nation-state-hiring-fraud
Nation-State Hiring Fraud: Fake IT Workers, Laptop Farms, and Background-Check Blind Spots
www.abnormal.ai
August 23, 2026 at 2:06 PM
"Nation-State Hiring Fraud: Fake IT Workers, Laptop Farms, and Background-Check Blind Spots" published by Abnormal. #ITWorker, #Deepfake https://www.abnormal.ai/blog/nation-state-hiring-fraud
"PurpleDelta’s Fraudulent Employment Operations" published by RecordedFuture. #ITWorker, #PurpleDelta https://www.recordedfuture.com/research/purpledelta-fraudulent-employment-operations
PurpleDelta’s Fraudulent Employment Operations
www.recordedfuture.com
August 19, 2026 at 2:21 AM
"PurpleDelta’s Fraudulent Employment Operations" published by RecordedFuture. #ITWorker, #PurpleDelta https://www.recordedfuture.com/research/purpledelta-fraudulent-employment-operations
"Meet my latest North Korean applicant" published by tanuki42. #ITWorker, #ContagiousTrader https://x.com/tanuki42_/status/2088278343653413254
Meet my latest North Korean applicant
x.com
August 18, 2026 at 12:49 AM
"Meet my latest North Korean applicant" published by tanuki42. #ITWorker, #ContagiousTrader https://x.com/tanuki42_/status/2088278343653413254
"What’s It Like to Hire a North Korean ‘IT Worker’? I Interviewed One" published by Unchained. #ITWorker https://unchainedcrypto.com/what-its-like-to-interview-a-north-korean-crypto-dev-applying-for-a-job/
What’s It Like to Hire a North Korean ‘IT Worker’? I Interviewed One
unchainedcrypto.com
August 14, 2026 at 1:36 AM
"What’s It Like to Hire a North Korean ‘IT Worker’? I Interviewed One" published by Unchained. #ITWorker https://unchainedcrypto.com/what-its-like-to-interview-a-north-korean-crypto-dev-applying-for-a-job/
"Inside North Korea’s Operation to Conquer the American Job Market" published by WSJ. #News, #ITWorker https://www.wsj.com/business/media/inside-north-koreas-operation-to-conquer-the-american-job-market-93729962
Inside North Korea’s Operation to Conquer the American Job Market
www.wsj.com
August 13, 2026 at 4:55 AM
"Inside North Korea’s Operation to Conquer the American Job Market" published by WSJ. #News, #ITWorker https://www.wsj.com/business/media/inside-north-koreas-operation-to-conquer-the-american-job-market-93729962
"FBI investigating North Korean remote IT staffer working for US agency" published by FederalNewsNetwork. #News, #ITWorker https://federalnewsnetwork.com/technology-main/2026/08/fbi-investigating-north-korean-remote-it-staffer-working-for-u-s-agency
FBI investigating North Korean remote IT staffer working for US agency
federalnewsnetwork.com
August 12, 2026 at 12:33 PM
"FBI investigating North Korean remote IT staffer working for US agency" published by FederalNewsNetwork. #News, #ITWorker https://federalnewsnetwork.com/technology-main/2026/08/fbi-investigating-north-korean-remote-it-staffer-working-for-u-s-agency
"Inside North Korea’s Cybercrime Ecosystem: Fake IT Workers, Gambling Networks and Malware" published by KudelskiSecurity. #ITWorker, #MoneyLaundering https://kudelskisecurity.com/research/inside-north-koreas-cybercrime-ecosystem-fake-it-workers-gambling-networks-and-malware
Inside North Korea’s Cybercrime Ecosystem: Fake IT Workers, Gambling Networks and Malware
kudelskisecurity.com
August 12, 2026 at 12:32 PM
"Inside North Korea’s Cybercrime Ecosystem: Fake IT Workers, Gambling Networks and Malware" published by KudelskiSecurity. #ITWorker, #MoneyLaundering https://kudelskisecurity.com/research/inside-north-koreas-cybercrime-ecosystem-fake-it-workers-gambling-networks-and-malware
"Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup" published by AnyRun. #ITWorker, #FamousChollima https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation-part-two
Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup
any.run
August 10, 2026 at 11:26 PM
"Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup" published by AnyRun. #ITWorker, #FamousChollima https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation-part-two
"Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup" published by
@anyrun_app
. #ITWorker, #FamousChollima
https://t.co/KSuwoypSJc
🔁 RT @lazarusholic | reposted by @cyb3rops
https://x.com/lazarusholic/status/2086957023523115055
@anyrun_app
. #ITWorker, #FamousChollima
https://t.co/KSuwoypSJc
🔁 RT @lazarusholic | reposted by @cyb3rops
https://x.com/lazarusholic/status/2086957023523115055
Smile, You’re on Camera! Part 2: Lazarus IT Workers Exposed
t.co
August 11, 2026 at 7:19 AM
"Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup" published by
@anyrun_app
. #ITWorker, #FamousChollima
https://t.co/KSuwoypSJc
🔁 RT @lazarusholic | reposted by @cyb3rops
https://x.com/lazarusholic/status/2086957023523115055
@anyrun_app
. #ITWorker, #FamousChollima
https://t.co/KSuwoypSJc
🔁 RT @lazarusholic | reposted by @cyb3rops
https://x.com/lazarusholic/status/2086957023523115055
"A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide" published by Wired. #News, #ContagiousInterview, #ITWorker https://www.wired.com/story/a-security-pro-hacked-north-korean-hackers-he-found-theyd-breached-hundreds-of-networks-worldwide/
A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide
www.wired.com
August 6, 2026 at 5:41 AM
"A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide" published by Wired. #News, #ContagiousInterview, #ITWorker https://www.wired.com/story/a-security-pro-hacked-north-korean-hackers-he-found-theyd-breached-hundreds-of-networks-worldwide/
"Alert to Countries, Companies, and Other Entities Regarding North Korean IT Workers" published by USFBI. #Sanctions, #ITWorker https://www.ic3.gov/CSA/2026/260731.pdf
Alert to Countries, Companies, and Other Entities Regarding North Korean IT Workers
www.ic3.gov
August 3, 2026 at 11:55 PM
"Alert to Countries, Companies, and Other Entities Regarding North Korean IT Workers" published by USFBI. #Sanctions, #ITWorker https://www.ic3.gov/CSA/2026/260731.pdf
"북한 IT 인력 관련 공동주의보 발표" published by KRMOFA. #Sanctions, #ITWorker https://www.mofa.go.kr/www/brd/m_4080/view.do?seq=377471&page=1&pitem=10
북한 IT 인력 관련 공동주의보 발표
www.mofa.go.kr
August 1, 2026 at 1:47 PM
"북한 IT 인력 관련 공동주의보 발표" published by KRMOFA. #Sanctions, #ITWorker https://www.mofa.go.kr/www/brd/m_4080/view.do?seq=377471&page=1&pitem=10
"DPRK Fake IT Workers: Inside Their Evolving Network Infrastructure" published by KudelskiSecurity. #ITWorker, #OpSec https://kudelskisecurity.com/research/dprk-fake-it-workers-inside-their-evolving-network-infrastructure
DPRK Fake IT Workers: Inside Their Evolving Network Infrastructure
kudelskisecurity.com
July 22, 2026 at 12:03 AM
"DPRK Fake IT Workers: Inside Their Evolving Network Infrastructure" published by KudelskiSecurity. #ITWorker, #OpSec https://kudelskisecurity.com/research/dprk-fake-it-workers-inside-their-evolving-network-infrastructure
"From Payroll to Pyongyang: The DPRK IT Worker Money Trail" published by Dtex. #Sanctions, #ITWorker, #MoneyLaundering https://www.dtex.ai/blog/dprk-it-worker-money-trail
From Payroll to Pyongyang: The DPRK IT Worker Money Trail
www.dtex.ai
July 22, 2026 at 12:01 AM
"From Payroll to Pyongyang: The DPRK IT Worker Money Trail" published by Dtex. #Sanctions, #ITWorker, #MoneyLaundering https://www.dtex.ai/blog/dprk-it-worker-money-trail
"North Korean IT Workers: How DPRK infiltrates remote hiring" published by Opsek. #Cryptocurrency, #ITWorker https://blog.opsek.io/north-korean-it-workers-remote-hiring/
North Korean IT Workers: How DPRK infiltrates remote hiring
blog.opsek.io
July 21, 2026 at 12:13 AM
"North Korean IT Workers: How DPRK infiltrates remote hiring" published by Opsek. #Cryptocurrency, #ITWorker https://blog.opsek.io/north-korean-it-workers-remote-hiring/