logo

North Korean IT worker scam spreading to Europe after US law enforcement crackdown

ID: 3d7a957a-7e60-584a-83e0-0a0bf2e3a9f1

STIX ID: report--3d7a957a-7e60-584a-83e0-0a0bf2e3a9f1

Feed Name: The Record from Recorded Future News

Threat Score
75/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

Google Threat Intelligence reports that DPRK operatives have expanded an IT-worker fraud and extortion scheme into Europe, using fabricated personas, stolen documents, hiring platforms (e.g., Upwork), local facilitators, and laptop farms to obtain employment at large organizations including defense and government targets; victims may face data theft or extortion, and investigations link some operators to the DPRK Munitions Industry Department amid active law-enforcement disruptions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.