North Korea

☆ pin

Also known as DPRK

Reports

First seen

Jul 21, 2026

Last seen

Oct 14, 2026

Motivation

Financial

Targeting

Sectors

Other ×1

Victim regions

×2

United States×2

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1566 Phishing ×1T1078 Valid Accounts ×1T1041 Exfiltration Over C2 Channel ×1T1589 Gather Victim Identity Information ×1T1598 Phishing for Information ×1

Recent reports

High

U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud

The Hacker NewsOct 14, 2026 High

DOJ Disrupts North Korean IT Worker Scheme; Two Arrested in Texas Laptop Farm Raids

The Record (Recorded Future News)Oct 13, 2026 High

North Korea's IT Worker Scheme Funds Russia's War Effort

CyberScoopJul 21, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.