DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

MSMT/2026/1 "The DPRK Use of Overseas Labour to Violate and Evade UN Sanctions" (16 Sep 2026) (3)

Date (as written)IncidentCountryActors
since at least Dec ember 2024Spotlight: Uncovered Russia-based North Korean IT Worker CellRussiaNorth Korean IT workers
October 2025Slack chat groups of North Korean IT workers: collection officer specifying crypto addressesNorth Korean IT workers
March 2025North Korean IT worker arrested in China for allegedly stealing Chinese military technology informationChinaa North Korean IT worker