North Korean IT workers: global expansion, extortion and data leak operations

Google Threat Intelligence Group (GTIG) / Google Cloud

More recently, and in conjunction with our partners, we have observed an uptick in extortion operations against large organizations, where IT workers will threaten to leak sensitive data unless a ransom is paid. ... North Korean IT workers remain an active threat in the U.S. as they also seek roles across Europe and Asia.