4 stories, newest first · one card per story
Japan, US, Australia and Germany attributed WaterPlum's fake-employer scheme to North Korea; 30,000 devices infected and $10.71 million stolen since December 2025.
North Korea's IT worker scheme (Famous Chollima/PurpleDelta) has expanded from IT into healthcare, sales, and financial services roles worldwide.
Huntress links suspected North Korean remote workers to sales, marketing, and healthcare jobs using stolen identities, VPNs, proxies, and KVM hardware.
Recorded Future details North Korean cluster PurpleDelta using AI-generated personas and ChatGPT assistants to infiltrate companies via fraudulent employment.
Today 1.6K readers · 2.5K views · 792 reads · all time 189K views