logo

FBI: North Korean IT workers steal source code to extort employers

ID: bdfd318a-8dd3-53b2-83d2-e849b5975817

STIX ID: report--bdfd318a-8dd3-53b2-83d2-e849b5975817

Feed Name: Bleeping Computer

Threat Score
85/100

Date Published: 2025-01-23

Date Updated: 2026-04-20

Author: Sergiu Gatlan

...
...

The FBI warns that North Korean IT workers are being hired remotely by companies, then copying source code, harvesting credentials and session tokens, exfiltrating sensitive data, and extorting former employers; the advisory details related indictments, prior warnings, and large-scale nation-state-linked cryptocurrency thefts, and recommends least-privilege access, stronger onboarding checks, log monitoring, and scrutiny of remote access practices.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.