logo

The North Korean on your payroll

ID: 2be29ee5-8033-5701-8d7f-43c126474d34

STIX ID: report--2be29ee5-8033-5701-8d7f-43c126474d34

Feed Name: Okta Threat Intelligence

Threat Score
60/100

Date Published: 2026-02-11

Date Updated: 2026-08-05

Author: Simon Conant, Alex Tilley

...
...

This report profiles a DPRK-linked actor dubbed "JJ" who constructs artificial professional personas to apply for roles (notably in AI and healthcare), using accounts on job boards, recruiter scheduling tools, coding platforms, dynamic DNS, and AI document workspaces. Okta OSINT notes these accounts are exclusively used for job-related activity and lack personal footprints, with additional detectable 'tells' such as résumé PDF metadata that can indicate a fabricated persona used for recruitment/INTEL operations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.