DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

One IT worker operating at least 12 personas across Europe and the United States

Date (as written)
late 2024
Year
2024
Country
Europe; United States
Actors (as written)
a DPRK IT worker
Actor pages
a DPRK IT worker
Tags (as written)
IT workers; infiltration; defense and government

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

One IT worker operating at least 12 personas across Europe and the United States · late 2024
(MSMT/2025/2, report p. 54) “In late 2024, one DPRK IT worker operated at least 12 personas across Europe and the United States. The IT worker actively sought employment with multiple organizations within Europe, particularly those within the defense industrial base and government sectors.” “Separately, additional investigations uncovered other IT worker personas seeking employment in Germany and Portugal”.
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub