DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

North Korea IT workers and Lazarus fake job campaigns against the defense industrial base (in "Nation-State Threats Targeting the Defense Industrial Base")

Date (as written)
2026-04-29
Year
2026
Country
US; UK (infrastructure nodes)
Actors (as written)
Lazarus; North Korea
Actor pages
LazarusNorth Korea
Tags (as written)
defense industrial base; US firms; Fortune 500 companies

Source entries (1)

Team Cymru blog

North Korea IT workers and Lazarus fake job campaigns against the defense industrial base (in "Nation-State Threats Targeting the Defense Industrial Base") · 2026-04-29
North Korea blends cyber operations with real world access. Lazarus is still running fake job campaigns, but they have gone further by placing actual personnel inside companies. In 2025, the DOJ indicted individuals tied to North Korea for placing IT workers inside over 100 US firms, including Fortune 500 companies.
https://www.team-cymru.com/post/defense-industrial-base-nation-state-network-telemetry

Suggest a correction on GitHub