Sign in

aptwhatnow.bsky.social

@aptwhatnow.bsky.social
74 followers 36 following 24 posts
PostsRepliesMedia
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 21/07/2026
conflict is coming from DPRK among other things, then people start caring a little bit more. cyberscoop.com/north-korea-...
cyberscoop.com
North Korea's IT worker scheme funds Russia's war effort
DTEX researchers found a series of transactions in a payment wallet showing North Korean IT worker salaries flowing into sanctioned entities that support the regime’s military programs.
020
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 21/07/2026
program, then who is really funding parts of the Ukraine conflict? Its all fun and games when you think about DPRK being off on its own little island doing DPRK things but once you start getting more of a 50k foot overview and seeing things like how 60% of Russia's artillery in the ...
100
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 21/07/2026
re-bring that topic up as it is "so hawt right now". DPRK moving to middle management and wanting to get off cam. Countries like India, Pakistan, Nigerian, Iran, and Latin America allll getting in on this. 2. The weapons program as a whole and how if Russia is being supported by DPRK's weapons...
100
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 21/07/2026
And there is a lot missing, many units we don't know about or have any context on, but hopefully it unlocks a door somewhere and is shared back so we are all on the same page. The activity overall also provided a few rant points such as 1. The Nigerian malicious subcontractor allowed for us to...
100
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 21/07/2026
intelligence gaps little by little. Took what he did, worked with the larger community (KawaiiJongUwUn etc) to add more context, ran it through our own holdings to beef up and corroborate the info, and then pushed out hoping others with THEIR pieces of the pie can help fill in more that is missing.
100
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 21/07/2026
dtex.ai/blog/dprk-it... dtex.ai/org_hierarch... dtex.ai/payment_brea... dtex.ai/geography_ma... Used this as a jumping off point because ZachXBT drop on it didn't get as much attention as it should've. In between the crypto info, were the operators/managers self identifying and filling in...
dtex.ai
From Payroll to Pyongyang: The DPRK IT Worker Money Trail
Follow the DPRK IT worker money trail. Our research reveals how payments are processed and funds flow through the regime.
152
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 29/05/2026
Iran aligned insider threat framing www.dtex.ai/blog/iran-co...
dtex.ai
How Iran-Connected Cases Expose a New Insider Risk Pattern
Uncover insights on Iran insider risk: how covert individuals play crucial roles in proxy operations and security threats.
000
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 26/04/2026
Here's your Aaron and David. Per partner, David switched to recruitment schemes recently and told on himself to Fortune. We didnt start tracking him til 2023. @browsercookies @Narcass3 fortune.com/2026/04/25/n... ia.acs.org.au/article/2026...
000
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 30/06/2025
www.wired.com/story/identi...
wired.com
Identities of More Than 80 Americans Stolen for North Korean IT Worker Scams
The US Justice Department revealed the identity theft number along with one arrest and a crackdown on “laptop farms” that allegedly facilitate North Korean tech worker impersonators across the US.
020
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 25/06/2025
www.youtube.com/watch?v=Y7x0...
youtube.com
I tried to hire a North Korean scammer
YouTube video by Christophe
000
Reposted by @aptwhatnow.bsky.social
Cynthia Brumfield @metacurity.com · 14/05/2025
Look at this nifty DPRK org chart that cybersecurity company DTEX produced.
0235
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 14/05/2025
www.dtexsystems.com/resources/i3...
dtexsystems.com
i³ Threat Advisory: Inside the DPRK: Spotting Malicious Remote IT Applicants - DTEX Systems
DTEX has identified several new behavioral indicators tied to the DPRK worker scheme. Our latest Insider Threat Advisory has the details.
001
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 14/05/2025
www.wired.com/story/north-...
wired.com
North Korean IT Workers Are Being Exposed on a Massive Scale
Security researchers are publishing 1,000 email addresses they claim are linked to North Korean IT worker scams that infiltrated Western companies—along with photos of men allegedly involved in the sc...
100
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 14/05/2025
reports.dtexsystems.com/DTEX-Exposin...
reports.dtexsystems.com
101
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 14/05/2025
Many many folks in this effort over the years. Thankful for everyone and hope its of use.
1168
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 09/05/2025
Additionally QR codes as a phishing vector are in use by the group. A tactic that I feel may be a lil too techy for the clientele they seem to love picking on. Whether embedded in a doc or inline in the email, they seem to be testing this idea.
010
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 09/05/2025
In typical fashion their immediate concern for the APT is to get them off of the main channels, opting for side chats or excuses like "I have issues with email and service in the building, can reach me on Whatsapp" etc.
110
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 09/05/2025
APT43 activity with multiple European embassies being spoofed and likely targeted. Rapport building themes and lures center around DPRK Human Rights and reactions to DPRKs official stance on NK troops in Russia cc @jennytown.bsky.social @elias.foxhold.net @garyfreasbysm.bsky.social
133
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 02/05/2025
Great and entertaining article by @wired.com www.wired.com/story/north-...
wired.com
Your Favorite New Coworker Is an AI-Enhanced Operative From North Korea
For years, North Korea has been secretly placing young IT workers inside Western companies. With AI, their schemes are now more devious—and effective—than ever.
000
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 28/04/2025
www.dailynk.com/english/nort...
dailynk.com
N. Korea launches AI tech venture with Chinese firm to bypass sanctions - Daily NK English
North Korea has partnered with a Chinese IT company in Shenyang to establish a startup focused on AI security technology development.
010
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 26/04/2025
010
Reposted by @aptwhatnow.bsky.social
Nick from Weymouth 🇺🇦🇺🇸 @nicastronaut.bsky.social · 22/04/2025
Psssst if your CTI vendor assessed "Lazarus group" as a priority threat actor for you, it's time to get a new CTI vendor.
274
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 22/04/2025
Kim Chaek Uni of Tech. DPRK IT Workers supplying money to sanctioned Ryonbong. Client countries: US,UK, JP, UA, CN, BR. Cha Gang Song JangMyongSong KimMunSong Li Song Ryong Mun Ri Yong Kim Su Jin Choe Song Guk Paek Myong Ho Paek Choe Hyon Pyo Se Il Cha Gang Song home.treasury.gov/news/press-r...
home.treasury.gov
Treasury Sanctions North Korean Overseas Representatives, Shipping Companies, and Chinese Entities Supporting the Kim Regime
WASHINGTON – The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) today sanctioned nine entities, 16 individuals, and six vessels in response to North Korea's ongoing developm...
011
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 17/04/2025
@nicastronaut.bsky.social better come get ya boy lol www.justice.gov/opa/pr/maryl...
justice.gov
Maryland Man Pleads Guilty to Conspiracy to Commit Wire Fraud
Minh Phuong Ngoc Vong, 40, of Bowie, Maryland, pleaded guilty today to conspiracy to commit wire fraud in connection with a scheme whereby he conspired with unknown individuals, including John Doe, al...
010
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 13/04/2025
Much like their APT45 homies at times, DPRK ITW searching out regime priorities. Our goon's collect, Keygen, after analysis shows in 2024. Drone-UAV-Defense-Countermeasure Intelligence with ties to a certain DPRK College. 👀
031
Reposted by @aptwhatnow.bsky.social
Mark Karayan @markkarayan.bsky.social · 07/03/2025
North Korean threat groups right now
031
aptwhatnow.bsky.social @aptwhatnow.bsky.social · 05/03/2025
podcasts.apple.com/us/podcast/c...
podcasts.apple.com
Meet the “Kyles” — North Korea’s secret IT warriors
Podcast Episode · Click Here · 03/04/2025 · 24m
001