DPRK

Following a recent axios npm package compromise, DPRK (UNC1069) is expanding beyond the crypto sector - we are publishing 164 IOCs and detailing their currently active social engineering approaches.

Technical dive into North Korean VS Code Abuse tactics used for Contagious Interview. DPRK IT Workers trail included.

The ongoing monitoring of DPRK IT workers' networks reveals the pivot from remote "workers" to "recruiters" with the goal of scaling operations.

Everything you need to know about TraderTraitor, the DPRK hackers responsible for countless crypto exchange thefts

The United States, Japan, and the Republic of Korea issued a joint statement on cryptocurrency thefts perpetrated by the DPRK and on private-public partnerships

North Korean IT workers are particularly attracted to blockchain and cryptocurrency companies for several reasons, including evading international sanctions by avoiding traditional financial systems.