Exposing DPRK:
Nation-State Threat Actors

North Korea’s cyber threat operates more like an international criminal network than a traditional state-sponsored group. Discover the surprising motivations and intricate operations behind DPRK’s covert cyber workforce.

READ THE REPORT

Document hash: 4ceb2c22ac2c4bc93b7fe9d13d358c49a85d28b9818e8f8f9767cc48baa12940

Key Findings

Cyber Hierarchy Unveiled

Comprehensive organizational chart detailing DPRK’s cyber structure for better defense and attribution.

Survival Over Ideology

Operatives motivated by basic survival needs, complicating threat attribution.

Sustained Talent Pipeline

Documented North Korean cyber education system fueling global operative deployment.

Proactive Threat Indicators

Behavioral and technical markers to detect embedded DPRK cyber operatives early.

Research Center 227 Infiltration

DPRK’s AI unit actively enabling hacking operations.

Operative Profiles

Detailed identification of active DPRK cyber operatives, methods, and infiltration tactics.

“The threat of unintentionally hiring North Korean IT workers is larger than most people realize. It’s covert, it’s global, and it’s active right now—which is why industry and government need to work together to come up with solutions to counter the threat.”

Kevin Mandia
Co-Founder and General Partner of Ballistic Ventures, DTEX Advisory Board Member,
and Founder and Former CEO of Mandiant

Related Resources

Threat Advisory

i³ Threat Advisory: Inside the DPRK: Spotting Malicious Remote IT Applicants

Blog

Exposing DPRK’s Cyber Underworld: Survival and the Pursuit of WMDs

Infographic

DPRK Organization Chart

In The News

North Korean IT Workers Are Being Exposed on a Massive Scale

Take Action Now