DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Ryugyong Technology IT workers holding jobs at more than eight companies under false personas

Date (as written)
2025
Year
2025
Country
United States; Canada; India; Netherlands; Ireland (employer locations)
Actors (as written)
DPRK Ryugyong Technology Company (75 Guidance Bureau, MID)
Actor pages
DPRK Ryugyong Technology Company
Tags (as written)
IT workers; false personas

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

Ryugyong Technology IT workers holding jobs at more than eight companies under false personas · 2025
(MSMT/2025/2, report p. 63) “In 2025, Ryugyong IT workers used false personas to facilitate their work. The IT workers maintained jobs under at least two false personas at more than eight separate named companies, including companies based in the United States, Canada, India, the Netherlands, and Ireland.”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub