UN Panel of Experts S/2024/215
IT workers building or exploiting vulnerabilities in platforms and smart contracts; suspected smaller cryptocurrency heists; fake-identity employment · 2023
Annex 64 (Summary of recent DPRK IT worker tactics, techniques, and procedures): “During their work, IT workers reportedly find vulnerabilities to exploit and/or build vulnerabilities into platforms and smart contracts to steal funds, and are suspected of conducting several smaller cryptocurrency heists this year (see Annexes 89-90). ... In November and December 2023, cybersecurity companies released detailed reports on DPRK IT workers seeking unauthorized employment with organizations around the world to generate revenue and engage in espionage. To do so, DPRK IT workers maintain resumes with fake identities, impersonating individuals of various jurisdictions ...”