11/ This cluster of DPRK IT worker activity is less sophisticated compared to groups like AppleJeus and TraderTraitor, which operate far more efficiently and present the greatest risks to the industry.
I previously estimated DPRK IT workers generate multiple seven figures per month in revenue, and the data here supports that.
Unpopular opinion: threat actors are leaving an opportunity on the table by not targeting low-tier DPRK groups. The risk of repercussions is low, competition is minimal, and the targets are arguably deserving.
I plan to continue building out
investigation.io with future findings.
Special thanks to
@domain for helping me purchase two premium domains.