THREAT OPS › Threat News › PurpleDelta's Fraudulent Employment Operations
PurpleDelta's Fraudulent Employment Operations
<h2>Executive Summary</h2> <p>Insikt Group has identified several clusters of activity linked to PurpleDelta, Recorded Future's designation for North Korean IT workers, comprising multiple operators likely based in China. Between late 2024 and early 2025, one cluster applied to jobs at over 1,100 companies, primarily in the software and technology, staffing and consulting, and healthcare a
Attributed threat actors
- Contagious InterviewG1052
MITRE ATT&CK techniques
- Social MediaT1593.001
Indicators of compromise
- https://www.justice.gov/opa/pr/justice-department-announces-nationwide-actions-combat-illicit-north-korean-governmenturl