"The Women Behind North Korea's IT Worker Operations" published by HaydenMckenzie. #ITWorker https://haydenmckenzie.com/research/dprk-it-worker-cell-part-one
The Women Behind North Korea's IT Worker Operations
haydenmckenzie.com
September 26, 2026 at 1:24 AM
"The Women Behind North Korea's IT Worker Operations" published by HaydenMckenzie. #ITWorker https://haydenmckenzie.com/research/dprk-it-worker-cell-part-one
"Spotted a Weird Github Organization? It Might be DPRK!" published by Ketman. #ITWorker, #DPRK, #CTI https://www.ketman.org/dprk-it-workers-github-organizations.html
October 1, 2025 at 11:30 PM
"Spotted a Weird Github Organization? It Might be DPRK!" published by Ketman. #ITWorker, #DPRK, #CTI https://www.ketman.org/dprk-it-workers-github-organizations.html
"What’s It Like to Hire a North Korean ‘IT Worker’? I Interviewed One" published by Unchained. #ITWorker https://unchainedcrypto.com/what-its-like-to-interview-a-north-korean-crypto-dev-applying-for-a-job/
What’s It Like to Hire a North Korean ‘IT Worker’? I Interviewed One
unchainedcrypto.com
August 14, 2026 at 1:36 AM
"What’s It Like to Hire a North Korean ‘IT Worker’? I Interviewed One" published by Unchained. #ITWorker https://unchainedcrypto.com/what-its-like-to-interview-a-north-korean-crypto-dev-applying-for-a-job/
"Major Blockchain Firm Consensys Accidentally Hired a North Korean Hacker" published by DropSiteNews. #News, #Cryptocurrency, #ITWorker, #MetaMask https://www.dropsitenews.com/p/consensys-metamask-crypto-wallet-hired-north-korean-hacker
https://www.dropsitenews.com/p/consensys-metamask-crypto-wallet-hired-north-korean-hacker
www.dropsitenews.com
July 20, 2026 at 5:49 AM
"Major Blockchain Firm Consensys Accidentally Hired a North Korean Hacker" published by DropSiteNews. #News, #Cryptocurrency, #ITWorker, #MetaMask https://www.dropsitenews.com/p/consensys-metamask-crypto-wallet-hired-north-korean-hacker
"Insights into Suspected DPRK Workers: Red Flags to Look Out For" published by Huntress. #ITWorker, #FamousChollima, #PiKVM, #Guermok https://www.huntress.com/blog/huntress-dprk-remote-worker-investigation
Insights into Suspected DPRK Workers: Red Flags to Look Out For
www.huntress.com
August 27, 2026 at 4:54 AM
"Insights into Suspected DPRK Workers: Red Flags to Look Out For" published by Huntress. #ITWorker, #FamousChollima, #PiKVM, #Guermok https://www.huntress.com/blog/huntress-dprk-remote-worker-investigation
"GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI" published by Google. #Trend, #ITWorker, #MidnightNeptune https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai
GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI
cloud.google.com
September 9, 2026 at 3:29 AM
"GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI" published by Google. #Trend, #ITWorker, #MidnightNeptune https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai
"A suspected DPRK IT worker was employed at THORSwap" published by meowmfer. #ITWorker, #DPRK, #CTI https://archive.md/5mrJC
May 11, 2026 at 1:30 PM
"A suspected DPRK IT worker was employed at THORSwap" published by meowmfer. #ITWorker, #DPRK, #CTI https://archive.md/5mrJC
"Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup" published by AnyRun. #ITWorker, #FamousChollima https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation-part-two
Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup
any.run
August 10, 2026 at 11:26 PM
"Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup" published by AnyRun. #ITWorker, #FamousChollima https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation-part-two
"Meet my latest North Korean applicant" published by tanuki42. #ITWorker, #ContagiousTrader https://x.com/tanuki42_/status/2088278343653413254
Meet my latest North Korean applicant
x.com
August 18, 2026 at 12:49 AM
"Meet my latest North Korean applicant" published by tanuki42. #ITWorker, #ContagiousTrader https://x.com/tanuki42_/status/2088278343653413254
"IT workers at big tech companies revealed as North Korean spies" published by 60Minutes9. #ITWorker, #Youtube, #DPRK, #CTI https://www.youtube.com/watch?v=kIcw6vpmAHI
March 31, 2026 at 3:30 PM
"IT workers at big tech companies revealed as North Korean spies" published by 60Minutes9. #ITWorker, #Youtube, #DPRK, #CTI https://www.youtube.com/watch?v=kIcw6vpmAHI
"A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide" published by Wired. #News, #ContagiousInterview, #ITWorker https://www.wired.com/story/a-security-pro-hacked-north-korean-hackers-he-found-theyd-breached-hundreds-of-networks-worldwide/
A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide
www.wired.com
August 6, 2026 at 5:41 AM
"A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide" published by Wired. #News, #ContagiousInterview, #ITWorker https://www.wired.com/story/a-security-pro-hacked-north-korean-hackers-he-found-theyd-breached-hundreds-of-networks-worldwide/
"How We Caught Lazarus's IT Workers Scheme Live on Camera" published by AnyRun. #ITWorker, #FamousChollima, #DPRK, #CTI https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation/
December 4, 2025 at 5:30 PM
"How We Caught Lazarus's IT Workers Scheme Live on Camera" published by AnyRun. #ITWorker, #FamousChollima, #DPRK, #CTI https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation/
"Treasury Sanctions Facilitators of DPRK IT Worker Fraud Targeting U.S. Businesses" published by USTreasury. #ITWorker, #Sanctions, #DPRK, #CTI https://home.treasury.gov/news/press-releases/sb0416
March 12, 2026 at 11:30 PM
"Treasury Sanctions Facilitators of DPRK IT Worker Fraud Targeting U.S. Businesses" published by USTreasury. #ITWorker, #Sanctions, #DPRK, #CTI https://home.treasury.gov/news/press-releases/sb0416
"The North Korean IT worker threat: A modern insider risk" published by Corelight. #Deepfake, #ITWorker, #DPRK, #CTI https://corelight.com/blog/north-korean-it-worker-insider-threat
June 14, 2026 at 1:30 PM
"The North Korean IT worker threat: A modern insider risk" published by Corelight. #Deepfake, #ITWorker, #DPRK, #CTI https://corelight.com/blog/north-korean-it-worker-insider-threat
"A North Korean recruiter just tried to pay me $300/month to launder his Upwork identity" published by tanuki42. #ITWorker, #DPRK, #CTI https://archive.md/kvuMA
May 13, 2026 at 1:30 PM
"A North Korean recruiter just tried to pay me $300/month to launder his Upwork identity" published by tanuki42. #ITWorker, #DPRK, #CTI https://archive.md/kvuMA
"OFAC Targets DPRK IT Workers Using Crypto" published by Chainalysis. #ITWorker, #Sanctions, #DPRK, #CTI https://www.chainalysis.com/blog/ofac-targets-north-korean-it-workers-crypto-march-2026/
March 12, 2026 at 11:30 PM
"OFAC Targets DPRK IT Workers Using Crypto" published by Chainalysis. #ITWorker, #Sanctions, #DPRK, #CTI https://www.chainalysis.com/blog/ofac-targets-north-korean-it-workers-crypto-march-2026/
"M-Trends 2026: Data, Insights, and Strategies From the Frontlines" published by Google. #ITWorker, #Trend, #DPRK, #CTI https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2026
March 24, 2026 at 1:30 PM
"M-Trends 2026: Data, Insights, and Strategies From the Frontlines" published by Google. #ITWorker, #Trend, #DPRK, #CTI https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2026
"The North Korean IT Workers" published by Mandiant. #ITWorker, #Podcast, #CTI, #OSINT, #LAZARUS https://open.spotify.com/episode/0xeaavXjlX2XLm3oibOv6g?si=hLLg3RKCS12jZGQec1D1dg&nd=1&dlsi=f05401d5b20f4f5c
February 23, 2024 at 12:30 PM
"The North Korean IT Workers" published by Mandiant. #ITWorker, #Podcast, #CTI, #OSINT, #LAZARUS https://open.spotify.com/episode/0xeaavXjlX2XLm3oibOv6g?si=hLLg3RKCS12jZGQec1D1dg&nd=1&dlsi=f05401d5b20f4f5c
"The DPRK Remote Worker Threat: Unmasking North Korea's Digital Deception" published by Flashpoint. #ITWorker, #DPRK, #CTI https://flashpoint.io/blog/dprk-remote-worker-threat-north-korea/
July 30, 2025 at 1:30 PM
"The DPRK Remote Worker Threat: Unmasking North Korea's Digital Deception" published by Flashpoint. #ITWorker, #DPRK, #CTI https://flashpoint.io/blog/dprk-remote-worker-threat-north-korea/
"I've traced a confirmed #DPRK IT worker who served as the primary developer of Verida Network's credential verification system" published by meowmfer. #ITWorker, #DPRK, #CTI https://archive.md/FSB2A
April 17, 2026 at 1:30 PM
"I've traced a confirmed #DPRK IT worker who served as the primary developer of Verida Network's credential verification system" published by meowmfer. #ITWorker, #DPRK, #CTI https://archive.md/FSB2A
"North Korea Drives Record $2 Billion Crypto Theft Year, Pushing All-Time Total to $6.75 Billion" published by Chainalysis. #DeFi, #ITWorker, #MoneyLaundering, #DPRK, #CTI https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2026/
December 19, 2025 at 1:30 AM
"North Korea Drives Record $2 Billion Crypto Theft Year, Pushing All-Time Total to $6.75 Billion" published by Chainalysis. #DeFi, #ITWorker, #MoneyLaundering, #DPRK, #CTI https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2026/
"The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities" published by MSMT. #ITWorker, #Sanctions, #Whitepaper, #DPRK, #CTI https://msmt.info/Publications/detail/MSMT%20Report/4221
October 22, 2025 at 11:30 PM
"The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities" published by MSMT. #ITWorker, #Sanctions, #Whitepaper, #DPRK, #CTI https://msmt.info/Publications/detail/MSMT%20Report/4221
"Inside the Scam: North Korea’s IT Worker Threat" published by RecordedFuture. #BeaverTail, #ITWorker, #InvisibleFerret, #OtterCookie, #PurpleBravo, #TAG-121, #TAG-120, #DPRK, #CTI https://www.recordedfuture.com/research/inside-the-scam-north-koreas-it-worker-threat
February 13, 2025 at 11:30 AM
"Inside the Scam: North Korea’s IT Worker Threat" published by RecordedFuture. #BeaverTail, #ITWorker, #InvisibleFerret, #OtterCookie, #PurpleBravo, #TAG-121, #TAG-120, #DPRK, #CTI https://www.recordedfuture.com/research/inside-the-scam-north-koreas-it-worker-threat
"Your Favorite New Coworker Is an AI-Enhanced Operative From North Korea" published by Wired. #ITWorker, #News, #DPRK, #CTI https://www.wired.com/story/north-korea-stole-your-tech-job-ai-interviews/
May 6, 2025 at 1:30 PM
"Your Favorite New Coworker Is an AI-Enhanced Operative From North Korea" published by Wired. #ITWorker, #News, #DPRK, #CTI https://www.wired.com/story/north-korea-stole-your-tech-job-ai-interviews/
"Justice Department Announces Nationwide Actions to Combat Illicit North Korean Government Revenue Generation" published by USJustice. #APT38, #ITWorker, #News, #DPRK, #CTI https://www.justice.gov/opa/pr/justice-department-announces-nationwide-actions-combat-illicit-north-korean-government
November 15, 2025 at 1:30 PM