DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

overseas co-conspirator (3)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
Between on or about January 21, 2023, and on or about May 6, 2024Overseas IT worker posing as "Thomas H." employed at Company A, a California-based software development firmU.S. (California)overseas co-conspirator; Kejia Wang; Zhenxing Wang
on or about January 9, 2024 (hired); January 19, 2024 (remote access installed)Overseas IT worker posing as "Lan Duc N." employed at Company C, a California-based defense contractor; laptop routed through Kejia Wang and Zhenxing WangU.S. (California)overseas co-conspirator (Individual C managed an IT company based in North Korea); Kejia Wang; Zhenxing Wang
between on or about Jan. 19, 2024, and on or about April 2, 2024ITAR data accessed at California defense contractorUnited Statesoverseas co-conspirator (DPRK IT worker scheme)