NICKEL TAPESTRY expands fraudulent worker operations

The North Korean IT worker scheme grows to include organizations in Europe and Asia and industries beyond the technology sector

Sophos News
"NICKEL TAPESTRY expands fraudulent worker operations" published by SecureWorks. #ITWorker, #NickelTapestry, #DPRK, #CTI https://news.sophos.com/en-us/2025/05/08/nickel-tapestry-expands-fraudulent-worker-operations/
NICKEL TAPESTRY expands fraudulent worker operations

The North Korean IT worker scheme grows to include organizations in Europe and Asia and industries beyond the technology sector

Sophos News
"NICKEL TAPESTRY Infrastructure Associated with Crowdfunding Scheme" published by SecureWorks. #ITWorker, #NickelTapestry, #DPRK, #CTI https://www.secureworks.com/blog/nickel-tapestry-infrastructure-associated-with-crowdfunding-scheme
NICKEL TAPESTRY Infrastructure Associated with Crowdfunding Scheme

Learn how Secureworks Counter Threat Unit researchers are investigating network infrastructure links between North Korean IT worker schemes and a 2016 crowdfunding scam.

Secureworks
"Fraudulent North Korean IT Worker Schemes: From Insider Threats to Extortion" published by SecureWorks. #ITWorker, #NickelTapestry, #DPRK, #CTI https://www.secureworks.com/blog/fraudulent-north-korean-it-worker-schemes
Fraudulent North Korean IT Worker Schemes: From Insider Threats to Extortion

Learn how Counter Threat Unit researchers have observed patterns and evolutions in IT worker schemes linked to the North Korean government.

Secureworks