North Korean IT workers Archives • Daily CyberSecurity

Hired to Hack: North Korean Fake IT Workers Hijack Exec Identities in ‘Contagious Interview’ Scams Open VSX Malware String-Fragment Reconstruction DarkCloud Stealer, steganography APT 35 Charming Kitten cyclops

Open VSX Malware String-Fragment Reconstruction DarkCloud Stealer, steganography APT 35 Charming Kitten cyclops

Hired to Hack: North Korean Fake IT Workers Hijack Exec Identities in ‘Contagious Interview’ Scams

Do Son February 24, 2026

A new report from the GitLab Threat Intelligence Team lifts the veil on the latest tradecraft utilized...

Inside the ‘Upworksell’ Syndicate: Hacker Gets 60 Months for Funneling US Tech Jobs to North Korea Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group

Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group

Inside the ‘Upworksell’ Syndicate: Hacker Gets 60 Months for Funneling US Tech Jobs to North Korea

Do Son February 20, 2026

A 29-year-old Ukrainian national has been sentenced to 60 months in federal prison for orchestrating a massive,...

“Natural Selection” at Work: How North Korean IT Workers Use AI to Infiltrate Companies North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack

North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack

“Natural Selection” at Work: How North Korean IT Workers Use AI to Infiltrate Companies

Do Son February 17, 2026

A new report from Okta Threat Intelligence has pulled back the curtain on a sprawling fraudulent employment...

GemStuffer RubyGems Campaign RubyGems Data Exfiltration TanStack npm Compromise Supply Chain Attack DNS Hijacking APT28 (Fancy Bear) OpenVSX Supply Chain Attack Checkmarx Plugin Breach Stryker Cyberattack CISA Alert Trans-Regional Cyber Conflict Operation Epic Fury Cyber Operation MacroMaze APT28 Cyber Espionage Notepad++ Supply Chain Attack Lotus Blossom Group Defense Industrial Base Threats GTIG Report APT28 Operation Neusploit CVE-2026-21509 Bookworm Malware

Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector

Do Son February 11, 2026

A new report from Google Threat Intelligence Group (GTIG) paints a stark picture of the modern battlefield,...

Unmasking the Proxy: Silent Push “Traffic Origin” Exposes True Actor Locations Residential Proxy Detection

Unmasking the Proxy: Silent Push “Traffic Origin” Exposes True Actor Locations

Do Son February 11, 2026

A new report by Silent Push reveals how advanced traffic analysis can strip away the digital masks...

Deepfakes and Deception: North Korean IT Workers Infiltrating Companies to Fund Regime North Korean IT workers, deepfake identities

Deepfakes and Deception: North Korean IT Workers Infiltrating Companies to Fund Regime

Do Son September 1, 2025

A new report from Threat Intel Researcher Rakesh Krishnan sheds light on the growing threat posed by...

Fake Identities, Real Profits: Exposing North Korea’s IT Front Companies DPRK IT Workers

Fake Identities, Real Profits: Exposing North Korea’s IT Front Companies

Do Son November 24, 2024

SentinelLabs has exposed a sophisticated network of front companies linked to North Korean IT workers. These entities,...

Critical Alert 3 Active Exploits Detected Today

Critical Alert

North Korean IT workers

Inside the ‘Upworksell’ Syndicate: Hacker Gets 60 Months for Funneling US Tech Jobs to North Korea

Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector

Unmasking the Proxy: Silent Push “Traffic Origin” Exposes True Actor Locations

Deepfakes and Deception: North Korean IT Workers Infiltrating Companies to Fund Regime

Fake Identities, Real Profits: Exposing North Korea’s IT Front Companies