| Microsoft Digital Defense Report 2022 (covers July 1, 2021 to June 30, 2022) | North Korean targeting of Russian think tanks, academics, and diplomatic officials | Russian | North Korean threat actors |
| 2023-09-07T15:00:00+00:00 (datePublished) | New campaign targeting security researchers with 0-day and fake debugging-symbols tool | | North Korean threat actors |
| Microsoft Digital Defense Report 2024 | North Korean targeting by region and sector (United States first, United Kingdom second; IT sector most targeted) | The United States; the United Kingdom | North Korean threat actors |
| 2024-07-08T18:48:00+00:00 | New Tactics from a Familiar Threat (call-blockflow npm package) | | North Korean threat actors |
| Microsoft Digital Defense Report 2025 | North Korean targeting focus: IT sector, banking/blockchain, defense, manufacturing; South Korea in APAC | South Korea | North Korean threat actors |
| 2025-05-14T16:44:07.782Z | BeaverTail / InvisibleFerret multi-stage npm campaign (in 2025 Mid-Year Threat Report) | | North Korean threat actors |
| publication date not shown on page | Crypto Country: North Korean cryptocurrency theft since 2017 | South Korean market; globally | North Korean threat actors |