DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

IT workers using 12 personas via recruitment agencies at European defense subcontractors

Date (as written)
Throughout 2024
Year
2024
Country
Europe
Actors (as written)
DPRK IT workers (per Mandiant)
Actor pages
DPRK IT workers
Tags (as written)
IT workers; infiltration; defense industry

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

IT workers using 12 personas via recruitment agencies at European defense subcontractors · Throughout 2024
(MSMT/2025/2, report p. 54) “Throughout 2024, Mandiant, in collaboration with third-party sources, observed IT workers leverage 12 personas using recruitment agencies to gain employment at defense subcontractors and other entities supporting numerous governments in Europe.”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub