{
  "name": "Inside the DPRK: Spotting Malicious Remote IT Applicants",
  "slug": "inside-the-dprk-spotting-malicious-remote-it-applicants",
  "description": "The Democratic People\u2019s Republic of Korea (DPRK) deploys skilled IT workers remotely to organizations globally funding its weapons of mass destruction (WMD) and missile programs, violating sanctions. In recent weeks, the techniques leveraged to evade detection have evolved, reducing reliance on traditional \u201claptop farms\u201d. The threat has also expanded beyond the U.S. with active operations within Europe and other regions. Included is a list of emails that are tied and associated with DPRK Insider IT Worker infrastructure that may have been used for potential employment opportunities.",
  "published": "2025-05-15T11:26:12+00:00",
  "created_at": "2025-05-15T11:26:12+00:00",
  "modified_at": "2025-05-21T18:18:40+00:00",
  "created_at_opencti": "2025-05-15T11:26:12+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-05-15",
    "dprk",
    "it workers"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "zoudennoufrouku-6958@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "zutehunopra-4524@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "zeuquossegeha-1838@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "yovedo6490@eazenity.com"
      },
      {
        "id": "",
        "name": "yilikiy345@dabeixin.com"
      },
      {
        "id": "",
        "name": "yexogo8708@jucatyo.com"
      },
      {
        "id": "",
        "name": "yetegit751@cabose.com"
      },
      {
        "id": "",
        "name": "yehijas553@mainmile.com"
      },
      {
        "id": "",
        "name": "yasoiladipou-2283@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "yasiked793@bustayes.com"
      },
      {
        "id": "",
        "name": "yannouprawatri-1119@skynet.infos.st"
      },
      {
        "id": "",
        "name": "yannouprawatri-1119@dlvr.us.to"
      },
      {
        "id": "",
        "name": "xopixa5082@bikedid.com"
      },
      {
        "id": "",
        "name": "xomek12069@jucatyo.com"
      },
      {
        "id": "",
        "name": "xoihounnammevoi-8009@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "xohidoquaxi-1225@sdj.fr.nf"
      },
      {
        "id": "",
        "name": "xogota7909@bustayes.com"
      },
      {
        "id": "",
        "name": "xisowic428@bixolabs.com"
      },
      {
        "id": "",
        "name": "xeyec21637@mainmile.com"
      },
      {
        "id": "",
        "name": "xewafic622@jucatyo.com"
      },
      {
        "id": "",
        "name": "xeilusellusu-1906@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "xecok58875@dabeixin.com"
      },
      {
        "id": "",
        "name": "xavej98169@bikedid.com"
      },
      {
        "id": "",
        "name": "xassoyeigreihi-5856@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "xabrinemeiyi-2707@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "wotesir363@bixolabs.com"
      },
      {
        "id": "",
        "name": "woposa2413@bustayes.com"
      },
      {
        "id": "",
        "name": "wilar84846@cabose.com"
      },
      {
        "id": "",
        "name": "wibovac285@eachart.com"
      },
      {
        "id": "",
        "name": "wewimol334@marikuza.com"
      },
      {
        "id": "",
        "name": "wadikas776@jucatyo.com"
      },
      {
        "id": "",
        "name": "vojenar361@bixolabs.com"
      },
      {
        "id": "",
        "name": "voipritufresa-4548@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "vixocev339@cabose.com"
      },
      {
        "id": "",
        "name": "vilomeiloussou-4871@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "vibopif488@jucatyo.com"
      },
      {
        "id": "",
        "name": "ventas@informatic.cl"
      },
      {
        "id": "",
        "name": "vehon96028@dabeixin.com"
      },
      {
        "id": "",
        "name": "vatag72030@kxgif.com"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@y.iotf.net"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@speed.1s.fr"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@six25.biz"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@pamil.1s.fr"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@ip11.tk"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@gland.xxl.st"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@eureka.0rg.fr"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@doviaso.fr.cr"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@alkonealko.cz"
      },
      {
        "id": "",
        "name": "troxeugrimmapa-5713@ac-cool.c4.fr"
      },
      {
        "id": "",
        "name": "triputouffeippa-4321@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "triddacreicroudo-6070@y.iotf.net"
      },
      {
        "id": "",
        "name": "triddacreicroudo-6070@pitiful.pp.ua"
      },
      {
        "id": "",
        "name": "triddacreicroudo-6070@ip11.tk"
      },
      {
        "id": "",
        "name": "triddacreicroudo-6070@gland.xxl.st"
      },
      {
        "id": "",
        "name": "triddacreicroudo-6070@doviaso.fr.cr"
      },
      {
        "id": "",
        "name": "treideuprakeucro-1981@fuppurge.info"
      },
      {
        "id": "",
        "name": "tosowe1477@kxgif.com"
      },
      {
        "id": "",
        "name": "tilinof553@jucatyo.com"
      },
      {
        "id": "",
        "name": "toby@redkitenft.com"
      },
      {
        "id": "",
        "name": "telinnuwuna-6011@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "tehov74684@bustayes.com"
      },
      {
        "id": "",
        "name": "taupaticoiquei-3150@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "tarolo4156@othao.com"
      },
      {
        "id": "",
        "name": "tanafec377@glalen.com"
      },
      {
        "id": "",
        "name": "talad61523@bustayes.com"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@y.iotf.net"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@speed.1s.fr"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@six25.biz"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@pamil.1s.fr"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@ip11.tk"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@gland.xxl.st"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@doviaso.fr.cr"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@eureka.0rg.fr"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@alkonealko.cz"
      },
      {
        "id": "",
        "name": "tagennudabre-4996@ac-cool.c4.fr"
      },
      {
        "id": "",
        "name": "soxotracroho-8654@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "sovayih689@bikedid.com"
      },
      {
        "id": "",
        "name": "socitim704@bustayes.com"
      },
      {
        "id": "",
        "name": "sobec53249@cabose.com"
      },
      {
        "id": "",
        "name": "simacab135@mainoj.com"
      },
      {
        "id": "",
        "name": "sidifi8162@kxgif.com"
      },
      {
        "id": "",
        "name": "sibafi8039@frandin.com"
      },
      {
        "id": "",
        "name": "sevugeirake-6661@fuppurge.info"
      },
      {
        "id": "",
        "name": "seraca5470@rdluxe.com"
      },
      {
        "id": "",
        "name": "selanay714@glalen.com"
      },
      {
        "id": "",
        "name": "sefaxip787@finghy.com"
      },
      {
        "id": "",
        "name": "satak29224@eazenity.com"
      },
      {
        "id": "",
        "name": "samolan870@frandin.com"
      },
      {
        "id": "",
        "name": "saralynn.nerriah@minofangle.org"
      },
      {
        "id": "",
        "name": "rotir48897@bixolabs.com"
      },
      {
        "id": "",
        "name": "salonij513@cumzle.com"
      },
      {
        "id": "",
        "name": "rissuleihanne-3395@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "rosibi4054@bixolabs.com"
      },
      {
        "id": "",
        "name": "ripej83413@cabose.com"
      },
      {
        "id": "",
        "name": "reufrauhugragau-5187@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "repiy47760@eazenity.com"
      },
      {
        "id": "",
        "name": "renox92716@bustayes.com"
      },
      {
        "id": "",
        "name": "raginap280@bikedid.com"
      },
      {
        "id": "",
        "name": "refrexoffiwu-6490@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "quoutoiximmeya-9331@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "quotugulahou-4853@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "quoiyaffeinefo-5463@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "quatatritrita-7964@mickaben.xxl.st"
      },
      {
        "id": "",
        "name": "quagitrihicou-1516@vip.222.ac.cn"
      },
      {
        "id": "",
        "name": "quagitrihicou-1516@mail.tbr.fr.nf"
      },
      {
        "id": "",
        "name": "quagitrihicou-1516@ac-cool.c4.fr"
      },
      {
        "id": "",
        "name": "puppovoigahu-1267@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "promeiloxusso-8189@machen-wir.com"
      },
      {
        "id": "",
        "name": "promeiloxusso-8189@0cd.cn"
      },
      {
        "id": "",
        "name": "probroireucoqui-6351@fuppurge.info"
      },
      {
        "id": "",
        "name": "prammemmeffeummou-9074@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@y.iotf.net"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@speed.1s.fr"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@vip.ep77.com"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@pitiful.pp.ua"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@pamil.1s.fr"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@ip11.tk"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@gland.xxl.st"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@eureka.0rg.fr"
      },
      {
        "id": "",
        "name": "prafauyobracre-1905@ac-cool.c4.fr"
      },
      {
        "id": "",
        "name": "poloded656@notedns.com"
      },
      {
        "id": "",
        "name": "pogocep722@cabose.com"
      },
      {
        "id": "",
        "name": "pequabappudda-2197@mx.fuppurge.info"
      },
      {
        "id": "",
        "name": "pefosa3581@cumzle.com"
      },
      {
        "id": "",
        "name": "pefoj21447@dpsols.com"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@yopmail.ozm.fr"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@yop.kyriog.fr"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@vip.ep77.com"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@tokai.tk"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@speed.1s.fr"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@readmail.biz.st"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@pitiful.pp.ua"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@pamil.1s.fr"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@myself.fr.nf"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@mr-email.fr.nf"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@mailadresi.tk"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@ip11.tk"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@gland.xxl.st"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@eureka.0rg.fr"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@doviaso.fr.cr"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@alkonealko.cz"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@addedbyjc.0rg.fr"
      },
      {
        "id": "",
        "name": "peffeujessaze-2978@ac-malin.fr.nf"
      },
      {
        "id": "",
        "name": "pazoissouzebro-3894@mx.fuppurge.info"
      },
      {
        "id": "",
        "name": "pazepragroxe-5371@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "nusucreuyunu-3345@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "nowol35987@glalen.com"
      },
      {
        "id": "",
        "name": "notaha9716@cabose.com"
      },
      {
        "id": "",
        "name": "nokival691@dabeixin.com"
      },
      {
        "id": "",
        "name": "nolak55056@bikedid.com"
      },
      {
        "id": "",
        "name": "noiprittehaho-9472@mickaben.xxl.st"
      },
      {
        "id": "",
        "name": "nogol15868@eazenity.com"
      },
      {
        "id": "",
        "name": "nogiye4063@ikanid.com"
      },
      {
        "id": "",
        "name": "nippaxoigummeu-8127@yop.moolee.net"
      },
      {
        "id": "",
        "name": "nippaxoigummeu-8127@test-infos.fr.nf"
      },
      {
        "id": "",
        "name": "nippaxoigummeu-8127@dede.infos.st"
      },
      {
        "id": "",
        "name": "nippaxoigummeu-8127@abo-free.fr.nf"
      },
      {
        "id": "",
        "name": "nippaxoigummeu-8127@askold.prout.be"
      },
      {
        "id": "",
        "name": "nenore7479@nasmis.com"
      },
      {
        "id": "",
        "name": "neleta8360@cabose.com"
      },
      {
        "id": "",
        "name": "nehoc18292@ikanid.com"
      },
      {
        "id": "",
        "name": "nehax85390@bikedid.com"
      },
      {
        "id": "",
        "name": "nauttouwoicumu-3573@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "napoko6257@eazenity.com"
      },
      {
        "id": "",
        "name": "nabed40323@nasmis.com"
      },
      {
        "id": "",
        "name": "nabeb58606@dabeixin.com"
      },
      {
        "id": "",
        "name": "movacig578@dabeixin.com"
      },
      {
        "id": "",
        "name": "monovo1269@ikanid.com"
      },
      {
        "id": "",
        "name": "mofukapiweu-2937@mx.fuppurge.info"
      },
      {
        "id": "",
        "name": "mivob44578@cabose.com"
      },
      {
        "id": "",
        "name": "moddofrefrounnau-8614@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "minobe4723@cumzle.com"
      },
      {
        "id": "",
        "name": "minnaffeugoiri-3955@y.iotf.net"
      },
      {
        "id": "",
        "name": "minnaffeugoiri-3955@six25.biz"
      },
      {
        "id": "",
        "name": "minnaffeugoiri-3955@pitiful.pp.ua"
      },
      {
        "id": "",
        "name": "minnaffeugoiri-3955@pamil.1s.fr"
      },
      {
        "id": "",
        "name": "minnaffeugoiri-3955@ip11.tk"
      },
      {
        "id": "",
        "name": "minnaffeugoiri-3955@eureka.0rg.fr"
      },
      {
        "id": "",
        "name": "minnaffeugoiri-3955@doviaso.fr.cr"
      },
      {
        "id": "",
        "name": "minnaffeugoiri-3955@alkonealko.cz"
      },
      {
        "id": "",
        "name": "meveme2219@bustayes.com"
      },
      {
        "id": "",
        "name": "merel48419@cumzle.com"
      },
      {
        "id": "",
        "name": "merawe2836@bixolabs.com"
      },
      {
        "id": "",
        "name": "meiddosapureu-9239@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "mayej17975@jucatyo.com"
      },
      {
        "id": "",
        "name": "mahaxaummuxau-2389@webstore.fr.nf"
      },
      {
        "id": "",
        "name": "mafeg16551@bikedid.com"
      },
      {
        "id": "",
        "name": "macasi2056@cabose.com"
      },
      {
        "id": "",
        "name": "louhodessate-9099@nomes.fr.nf"
      },
      {
        "id": "",
        "name": "losefi8945@frandin.com"
      },
      {
        "id": "",
        "name": "logise5729@eazenity.com"
      },
      {
        "id": "",
        "name": "logaved129@bixolabs.com"
      },
      {
        "id": "",
        "name": "locigir945@glalen.com"
      },
      {
        "id": "",
        "name": "lirobew779@nasmis.com"
      },
      {
        "id": "",
        "name": "lifreucrofiga-8996@y.iotf.net"
      },
      {
        "id": "",
        "name": "lifreucrofiga-8996@speed.1s.fr"
      },
      {
        "id": "",
        "name": "lifreucrofiga-8996@pamil.1s.fr"
      },
      {
        "id": "",
        "name": "lifreucrofiga-8996@six25.biz"
      },
      {
        "id": "",
        "name": "lifreucrofiga-8996@gland.xxl.st"
      },
      {
        "id": "",
        "name": "lifreucrofiga-8996@ip11.tk"
      }
    ],
    "attack_patterns": [
      {
        "id": "c1c513c4-e937-488a-9f1a-a91f8768d1e4",
        "name": "TA0008"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "United Kingdom of Great Britain and Northern Ireland"
      },
      {
        "id": "",
        "name": "United States of America"
      }
    ]
  },
  "external_refs": [
    "https://www.dtexsystems.com/resources/i3-threat-advisory-inside-the-dprk/",
    "https://otx.alienvault.com/pulse/6825eb759127d5e1142b86b0"
  ]
}