logo

PurpleDelta's Fraudulent Employment Operations

ID: 7d098cb9-6a84-5a4f-a796-01d9aba5eac9

STIX ID: report--7d098cb9-6a84-5a4f-a796-01d9aba5eac9

Feed Name: Recorded Future Blog

Threat Score
88/100

Date Published: 2026-08-18

Date Updated: 2026-08-19

...
...

Insikt Group details PurpleDelta, a North Korean IT worker operation that uses fabricated personas, AI tools, anti-detect browsers, remote access software, and facilitators to apply to >1,100 companies and gain employment at multiple organizations for potential intelligence collection and fraud; the report includes observed tradecraft, coordination channels, IoCs (IP addresses), and mitigations for organizations hiring remote technical roles.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.