Google Threat Intelligence Group (GTIG) / Google Cloud
DPRK IT worker operations expanding to Europe (one worker with 12 personas targeting defense and government) · 2025-04-01 (datePublished)
In late 2024, one DPRK IT worker operated at least 12 personas across Europe and the United States. The IT Worker actively sought employment with multiple organizations within Europe, particularly those within the defense industrial base and government sectors. ... GTIG has also observed a diverse portfolio of projects in the United Kingdom undertaken by DPRK IT workers.