logo

North Korea IT Workers Expand Their Employment Across Europe To Infiltrate the Company Networks

ID: ace08a98-5d71-5bd8-9789-98af3671c8ff

STIX ID: report--ace08a98-5d71-5bd8-9789-98af3671c8ff

Feed Name: GBHackers

Threat Score
75/100

Date Published: 2025-04-02

Date Updated: 2026-04-22

Author: Aman Mishra

...
...

Google Threat Intelligence Group details how DPRK IT workers have shifted operations to Europe, using fabricated personas and facilitator networks to obtain remote employment in sensitive sectors, route payments through crypto and payment services, exploit BYOD and virtualized environments to access corporate systems, and escalate extortion tactics against former employers since late 2024.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.