Threat actor
WageMole
Tracked by CyberSIXT since Apr 21, 2026 · last activity Sep 25, 2026
Coverage timeline
RSS-
Nisos Exposes North Korean Fake IT Workers in 170,000 Job Bidswww.darkreading.com · Sep 25, 2026
-
North Korean Recruiters Target Developers With Malware in Interviewssecurityonline.info · Sep 23, 2026
-
North Korean Hackers Infected 30,000 Devices Through Fake Jobswww.infosecurity-magazine.com · Sep 22, 2026
-
North Korean Fake Jobs Infected 30,000 Devices and Stole $10.7mwww.securityweek.com · Sep 22, 2026
-
North Korean Fake Job Interviews Infect 30,000 Devices Worldwidesecurityaffairs.com · Sep 22, 2026
-
Fake Job Interviews Deliver PylangGhost and GolangGhost RATs to Crypto Workerssecurityonline.info · Jul 28, 2026
-
North Korean hackers use fake crypto job offers to install RATswww.infosecurity-magazine.com · Jul 21, 2026
-
North Korean Hackers Use Supply Chain npm SDK to Steal Secretsthehackernews.com · Apr 29, 2026
-
Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Walletswww.infosecurity-magazine.com · Apr 29, 2026
-
Void Dokkaebi Turns Repos Into Worm Like Supply Chain Attackwww.trendmicro.com · Apr 21, 2026