#North Korea
20 stories taggedNorth Korea.

North Korea's Fake-Employee Scheme Now Recruits Workers From Iran and Lebanon
What began as a North Korean operation to sneak remote workers into U.S. tech companies has grown into a multinational scheme, with recruits now drawn from Iran and Lebanon.

North Korea's Fake Worker Scheme Now Reaches Into Hospitals and Sales Teams
The DPRK-linked hiring fraud that dogged tech firms is turning up in healthcare and sales roles, widening the insider risk for employers who thought they weren't a target.

North Korean Spies Are Getting Hired as IT Workers. Here Is How to Spot Them.
Security firm Huntress investigated three separate cases in 2026 where North Korean government operatives had successfully applied for, and been hired into, real jobs at Western companies. The red flags they left behind are now a playbook for anyone doing the hiring.

Attackers Are Skipping the Login and Going After the Hiring Desk
Criminals have figured out that faking a new hire or a password reset is easier than cracking a password. Identity verification is now the soft spot.

Rust developers hit by supply-chain attack on arrayref crate
Attackers hijacked a maintainer account and slipped credential-stealing malware into three popular Rust libraries during a 1.5-hour window on August 20.

North Korean IT Worker Infiltrated a Federal Agency, Boeing 737 Security Flaws Explored, and Refrigeration Systems Found Vulnerable
A North Korean operative got hired at a US government agency, researchers found exploitable weaknesses in Boeing 737 onboard systems, and serious flaws turned up in industrial refrigeration controllers. Here's what each finding means in practice.

The fake new hire problem: how criminals slip in through remote onboarding
Gaps between background checks, laptop delivery and account setup are letting impostors join companies as staff. Here's how the trick works, and what stops it.

North Korea's Lazarus Group Used a Secret Windows Flaw to Break Into Defence Companies
Hackers posing as recruiters sent fake job offers to aerospace and aviation workers in Europe and India, then used a previously unknown Windows vulnerability to seize full control of their computers.

Researchers Set Up a Fake Crypto Company and Hired Three Suspected North Korean IT Workers
The sting recorded every keystroke on the laptops the fake employer issued, exposing the paper trail of a scheme US officials say funnels wages back to Pyongyang.

Kimsuky Goes Offline: North Korean Spies Build Their Own Private AI Toolkit
South Korean researchers say the Kimsuky group has stopped relying on public chatbots and is now running AI on its own servers to sharpen phishing and speed up malware writing.

Criminals Are Using AI Like a Work Tool. Researchers Have the Receipts.
Two major studies show hackers using AI assistants to write malicious code, dodge safety filters, and compress attacks from weeks into hours. Cloud activity tied to this shift jumped 171 percent in the first half of 2026.

OnTrac Hacked, UK Schools Lose 607,000 Records, and AWS Points to North Korea
A parcel delivery company breached, more than half a million children's records exposed, and Amazon's cloud division naming state-backed hackers. Stories that almost slipped past.

North Korea-Linked Hackers Booby-Trap Korean Websites to Push Backdoors via AnySign4PC Flaw
A state-sponsored crew hijacked trusted South Korean sites and abused a weakness in a widely installed banking security tool to plant SIGNBT and COPPERHEDGE malware, no click required.

Amazon Traces September npm Hijack of Debug and Chalk to North Korean Hackers
What looked like a wallet-draining crypto heist ten months ago now points to Pyongyang, according to fresh analysis from Amazon.

North Korean Hackers Run Fake Zoom and Teams Sites to Rob Crypto Wallets
BlueNoroff's phishing kit screens visitors' crypto wallets before deciding who gets the malware, researchers say.