other

North Korea

State described as placing thousands of remote IT workers in Western organizations under fraudulent identities to earn wages and steal intellectual property.

Known aliases

DPRK
Pyongyang

Relationships

No evidence-backed relationships are recorded.

Current clusters

leadership1 distinct publisher

Trump cut Korea drills before talks exist. Price alliance reliability, not just Pyongyang.

The order to "substantially reduce" US-South Korea exercises came with no meeting scheduled and no public reply from Pyongyang. That makes it a planning input, not a headline.

Publishers:vox.com

Reality

Evidence58
Adoption34
Hype gap+16
Incentives68
Confidence54

security1 distinct publisher

North Korea's hiring funnel: 60 applications a day, 22 personas, ten jobs landed

Recorded Future says one PurpleDelta cluster applied at more than 1,100 companies and was likely employed at ten or more. The control point is the recruiting funnel, not the SOC.

Publishers:recordedfuture.com

Reality

Evidence64
Adoption55

security1 distinct publisher

A North Korean IT worker got hired by a federal agency. Vetting is a security control now.

The FBI is investigating how the hire happened, and SecurityWeek reports it was probably a contract job. The same roundup carried Rapid7 cutting 314 jobs under a new CEO.

Publishers:securityweek.com

Reality

Evidence38
Adoption42

Top News

Known aliases

Relationships

Current clusters

Trump cut Korea drills before talks exist. Price alliance reliability, not just Pyongyang.

North Korea's hiring funnel: 60 applications a day, 22 personas, ten jobs landed

A North Korean IT worker got hired by a federal agency. Vetting is a security control now.