CSIS entry 71

CSIS Significant Cyber Incidents

North Korean cyber spies are expanding their infiltration operations to target European defense and government organizations. Hackers posed as remote workers to steal data, commit espionage, and generate revenue, increasingly using extortion against former employers after gaining access.

North Korea's IT army has increasingly targeted positions at companies in Germany, Portugal, and the United Kingdom

DPRK IT workers