DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Slack chat groups of North Korean IT workers: collection officer specifying crypto addresses

Date (as written)
October 2025
Year
2025
Actors (as written)
North Korean IT workers
Actor pages
North Korean IT workers
Tags (as written)
IT workers

Source entries (1)

MSMT/2026/1 "The DPRK Use of Overseas Labour to Violate and Evade UN Sanctions" (16 Sep 2026)

Slack chat groups of North Korean IT workers: collection officer specifying crypto addresses · October 2025
One such case has been observed when in October 2025 a cybersecurity expert monitoring chat groups on the digital platform Slack among North Korean IT workers (although their location is unknown) revealed that a designated collection officer regularly specifie d addresses to which obtained cryptocurrency should be se nt and urged monthly transfers.
https://msmt.info/Publications/detail/MSMT%20Report/4232

Suggest a correction on GitHub