Team Cymru blog
Potential DPRK remote worker investigation for a corporate client (in "Corporate Threat Intelligence and Digital Investigations Explained") · 2026-03-16
The client noticed that a laptop provided to a remote worker pinged from two different locations: one in China and one in North Korea. ... A private investigator followed the alleged worker, who likely brought it back to a laptop farm where he kept it on for the North Korean worker.