Microsoft Threat Intelligence (Microsoft Security Blog)
Jasper Sleet North Korean remote IT workers using AI; 3,000 Microsoft consumer accounts suspended · 2025-06-30T19:17:49+00:00 (published_time)
Historically, North Korea’s fraudulent remote worker scheme has focused on targeting United States (US) companies in the technology, critical manufacturing, and transportation sectors. However, we’ve observed North Korean remote workers evolving to broaden their scope to target various industries globally that offer technology-related roles. ... Microsoft Threat Intelligence tracks North Korean IT remote worker activity as Jasper Sleet (formerly known as Storm-0287). ... we’ve suspended 3,000 known Microsoft consumer accounts (Outlook/Hotmail) created by North Korean IT workers.