Skip to content
Threat Feed
Subscribe

Tag

DPRK

4 briefs RSS
high threat

FAMOUS CHOLLIMA Laptop Farm Operations Disrupted

The U.S. FBI and CrowdStrike disrupted domestic laptop farms operated by the DPRK-nexus actor FAMOUS CHOLLIMA to conduct employment fraud and gain persistent access to victim organizations.

exploited FAMOUS CHOLLIMA laptop-farm employment-fraud initial-access insider-threat dprk
updated
medium advisory

North Korean IT Workers Expanding Facilitator Networks and Coercion Tactics

North Korean state-controlled IT workers are scaling global employment fraud operations by utilizing domestic facilitators, KVM-over-IP hardware, and remote management tools to exfiltrate data and generate revenue.

insider-threat identity-fraud espionage dprk remote-access social-engineering extortion
4t
high threat

Evolution of Web3-Based C2 in Cloud Supply Chain Attacks

North Korea-affiliated threat actors are leveraging Web3-based command-and-control infrastructure and open-source supply chain poisoning to extract high-privilege cloud credentials from developer environments and CI/CD pipelines.

Alluring Pisces supply-chain cloud-security C2 blockchain DPRK
3t
high threat

North Korean IT Worker Operation Infiltration Techniques

Analysis of North Korean IT workers reveals techniques for infiltrating Western tech companies, including fake identity creation, internal training, and recruitment of collaborators.

DPRK IT Workers dprk itw infiltration remote-work
2r 2t 1i