Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025
IT workers’ fake job offer compromise of an employee computer at a defense company · January 2024 - September 2025 (reporting period)
(MSMT/2025/2, report p. 95) “During the reporting period, an MSMT Participating State reported DPRK IT workers used social engineering and fake job offers to infiltrate an employee computer at a defense company. While the computer was compromised, the company’s internal security protocols recognized the indicators of compromise (IOCs) due to previous intrusion attempts and prevented any further comprise to the company’s network.”