| 23/07/2024 | KnowBe4 | US | Threat actors from North Korea |
| 2024-11-07T10:55:47.000Z | BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence | SentinelOne | | |
| As of 2025 | Kimsuky "quishing" (malicious QR code) spearphishing against think tanks, academia, governments | | Kimsuky |
| 2025-05-15T03:00:00+00:00 | North Korean OtterCookie is back (fourth version) | | WaterPlum (rebranding of Famous Chollima); Contagious Interviews campaign |
| 2026-03 | Axios | | Bluenoroff |
| 2026-04-24T03:00:00+00:00 | Sapphire Sleet Fake Interview campaign with fake Zoom invites targeting Mac users | | Sapphire Sleet |
| 2026-07-17T03:00:00+00:00 | North Korea-linked hackers modified hundreds of open-source repositories targeting developers | | North Korean hackers (Contagious Interview / Famous Chollima) |