logo

DPRK IT Worker Fraud: Hiring an Insider Threat

ID: e4a12cdc-d3f3-53f6-aa56-1f07353e5354

STIX ID: report--e4a12cdc-d3f3-53f6-aa56-1f07353e5354

Feed Name: Security Boulevard

Threat Score
60/100

Date Published: 2026-03-16

Date Updated: 2026-04-22

Author: Ryan LaSalle, CEO

...
...

Researchers conducted a controlled onboarding using a phony job offer and an instrumented corporate laptop to investigate suspected DPRK employment fraud; the device was traced to a Florida-based "laptop farm" where DPRK workers remotely accessed company-issued computers to impersonate U.S.-based employees, multiple victim companies were identified, and law enforcement was notified.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.