PurpleBravo weaponized coding tests and likely victims across the IT software supply chain (August 2024 to September 2025)

Date (as written): January 21, 2026
Year: 2026
Country: Belgium, Bulgaria, Costa Rica, India, Italy, the Netherlands, Pakistan, Romania, the United Arab Emirates (UAE), and Vietnam
Actors (as written): PurpleBravo
Actor pages: PurpleBravo
Tags (as written): AI, cryptocurrency, financial services, IT services, marketing, and software development

Source entries (2)

Hackmageddon cyber attacks timelines (Paolo Passeri)

Organizations in the artificial intelligence (AI), cryptocurrency, financial services, IT services, marketing, and software development sectors · 21/01/2026

Researchers at Recorded Future identify 3,136 individual IP addresses concentrated in South Asia and North America linked to likely targets of PurpleBravo activity from August 2024 to September 2025 as part of the Contagious Interview campaign. [Date Occurred: From August 2024 to September 2025; Date Discovered: From August 2024 to September 2025]

https://www.hackmageddon.com/2026/02/03/16-31-january-2026-cyber-attacks-timeline/

https://thehackernews.com/2026/01/north-korean-purplebravo-campaign.html

Recorded Future Insikt Group

PurpleBravo weaponized coding tests and likely victims across the IT software supply chain (August 2024 to September 2025) · January 21, 2026

PurpleBravo activity links to at least twenty likely victim organizations across AI, cryptocurrency, financial services, IT services, marketing, and software development on five continents. ... The organizations are in the AI, cryptocurrency, financial services, IT services, marketing, and software development industries in Belgium, Bulgaria, Costa Rica, India, Italy, the Netherlands, Pakistan, Romania, the United Arab Emirates (UAE), and Vietnam.

https://assets.recordedfuture.com/insikt-report-pdfs/2026/cta-nk-2026-0121.pdf

Suggest a correction on GitHub