DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

KMCTC IT workers’ fraudulent employment with a Chinese regional hospital network

Date (as written)
October and November 2023
Year
2023
Country
China
Actors (as written)
Korea Mangyongdae Computer Technology Corporation (KMCTC) IT workers
Actor pages
Korea Mangyongdae Computer Technology Corporation IT workers
Tags (as written)
IT workers; infiltration

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

KMCTC IT workers’ fraudulent employment with a Chinese regional hospital network · October and November 2023
(MSMT/2025/2, report p. 57) “DPRK IT workers associated with the KMCTC gained fraudulent employment with a Chinese regional hospital network in October and November 2023, posing a risk to the medical systems and patient data of that network.” “In 2024, KMCTC IT workers were found to have maintained numerous aliases and associated login credentials for freelance work platforms ...” (see Annex 7)
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub