other

DPRK threat actors

Collective label security vendors use for cyber operations units run by the North Korean state, tracked for intrusions into software supply chains and for cryptocurrency theft.

Known aliases

North Korean threat actors

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

DPRK malware came back in the next release of fetch-page-assets after npm's June takedown

OpenSourceMalware counted 4,367 infected repositories across 2,152 GitHub owners in July, and traced one maintainer through five months of advisory, cleanup and reinfection while the trigger sat in editor config.

Publishers:opensourcemalware.com

Reality

Evidence48
Adoption62
Hype gap+30
Incentives60
Confidence52