@aptwhatnow.bsky.social
dtex.ai/blog/dprk-it... dtex.ai/org_hierarch... dtex.ai/payment_brea... dtex.ai/geography_ma... Used this as a jumping off point because ZachXBT drop on it didn't get as much attention as it should've. In between the crypto info, were the operators/managers self identifying and filling in...
From Payroll to Pyongyang: The DPRK IT Worker Money Trail
Follow the DPRK IT worker money trail. Our research reveals how payments are processed and funds flow through the regime.
dtex.ai
Here's your Aaron and David. Per partner, David switched to recruitment schemes recently and told on himself to Fortune. We didnt start tracking him til 2023. @browsercookies @Narcass3 fortune.com/2026/04/25/n... ia.acs.org.au/article/2026...
Look at this nifty DPRK org chart that cybersecurity company DTEX produced.
WIRED@wired.com · last yr.Security researchers are publishing 1,000 email addresses they claim are linked to North Korean IT worker scams that infiltrated Western companies—along with photos of men allegedly involved in the schemes.
Many many folks in this effort over the years. Thankful for everyone and hope its of use.
APT43 activity with multiple European embassies being spoofed and likely targeted. Rapport building themes and lures center around DPRK Human Rights and reactions to DPRKs official stance on NK troops in Russia cc @jennytown.bsky.social @elias.foxhold.net @garyfreasbysm.bsky.social
Great and entertaining article by @wired.com www.wired.com/story/north-...
Your Favorite New Coworker Is an AI-Enhanced Operative From North Korea
For years, North Korea has been secretly placing young IT workers inside Western companies. With AI, their schemes are now more devious—and effective—than ever.
wired.com
Psssst if your CTI vendor assessed "Lazarus group" as a priority threat actor for you, it's time to get a new CTI vendor.
Kim Chaek Uni of Tech. DPRK IT Workers supplying money to sanctioned Ryonbong. Client countries: US,UK, JP, UA, CN, BR. Cha Gang Song JangMyongSong KimMunSong Li Song Ryong Mun Ri Yong Kim Su Jin Choe Song Guk Paek Myong Ho Paek Choe Hyon Pyo Se Il Cha Gang Song home.treasury.gov/news/press-r...
Treasury Sanctions North Korean Overseas Representatives, Shipping Companies, and Chinese Entities Supporting the Kim Regime
WASHINGTON – The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) today sanctioned nine entities, 16 individuals, and six vessels in response to North Korea's ongoing developm...
home.treasury.gov
@nicastronaut.bsky.social better come get ya boy lol www.justice.gov/opa/pr/maryl...
Maryland Man Pleads Guilty to Conspiracy to Commit Wire Fraud
Minh Phuong Ngoc Vong, 40, of Bowie, Maryland, pleaded guilty today to conspiracy to commit wire fraud in connection with a scheme whereby he conspired with unknown individuals, including John Doe, al...
justice.gov
Much like their APT45 homies at times, DPRK ITW searching out regime priorities. Our goon's collect, Keygen, after analysis shows in 2024. Drone-UAV-Defense-Countermeasure Intelligence with ties to a certain DPRK College. 👀
