Mandiant M-Trends 2025 (PDF)
North Korean IT workers as insider threat (UNC5267), 5% of initial infection vectors in 2024 · M-Trends 2025 (report year; no day-level date on PDF)
Specifically, a surge in North Korean IT workers seeking employment under false pretenses led to insider threat representing 5% of identified initial infection vectors. Mandiant primarily tracks this activity as UNC5267.