The North Korean on your payroll
ID: 2be29ee5-8033-5701-8d7f-43c126474d34
STIX ID: report--2be29ee5-8033-5701-8d7f-43c126474d34
Feed Name: Okta Threat Intelligence
This report profiles a DPRK-linked actor dubbed "JJ" who constructs artificial professional personas to apply for roles (notably in AI and healthcare), using accounts on job boards, recruiter scheduling tools, coding platforms, dynamic DNS, and AI document workspaces. Okta OSINT notes these accounts are exclusively used for job-related activity and lack personal footprints, with additional detectable 'tells' such as résumé PDF metadata that can indicate a fabricated persona used for recruitment/INTEL operations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
