DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

UNC5267 (3)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
2024-09-23 (datePublished)DPRK IT workers (UNC5267) obtaining remote employment; facilitator caseU.S.; China and Russia, with smaller numbers in Africa and Southeast AsiaUNC5267 (DPRK IT workers)
M-Trends 2025 (report year; no day-level date on PDF)North Korean IT workers as insider threat (UNC5267), 5% of initial infection vectors in 2024UNC5267 (North Korean IT workers)
M-Trends 2025 (report year; no day-level date on PDF)DPRK IT workers placed outside North Korea as remote IT contractors (UNC5267)Western countriesUNC5267 (DPRK)