DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Unmasking DPRK Cyber Threat Actors: Fake IT Worker Infrastructure (luckyguys[.]site)

Date (as written)
2026-04-22
Year
2026
Actors (as written)
DPRK-linked fake IT workers
Actor pages
DPRK-linked fake IT workers

Source entries (1)

Team Cymru blog

Unmasking DPRK Cyber Threat Actors: Fake IT Worker Infrastructure (luckyguys[.]site) · 2026-04-22
This investigation was initiated after reporting by cryptocurrency security researcher ZachXBT, who identified the domain luckyguys[.]site as being linked to payments associated with DPRK-linked fake IT workers.
https://www.team-cymru.com/post/dprk-fake-it-worker-cyber-threat-actors-infrastructure

Suggest a correction on GitHub