DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Mandiant M-Trends 2025 (PDF) (3)

Date (as written)IncidentCountryActors
M-Trends 2025 (report year; no day-level date on PDF)North Korean IT workers as insider threat (UNC5267), 5% of initial infection vectors in 2024UNC5267 (North Korean IT workers)
M-Trends 2025 (report year; no day-level date on PDF)APT45 profileAPT45 (DPRK)
M-Trends 2025 (report year; no day-level date on PDF)DPRK IT workers placed outside North Korea as remote IT contractors (UNC5267)Western countriesUNC5267 (DPRK)