🔐 Cybersecurity Aug 18, 2026

PurpleDelta's Fraudulent Employment Operations

Recorded Future
View Channel →
PurpleDelta's Fraudulent Employment Operations
Source ↗ 👁 3 💬 0
Executive Summary
Insikt Group has identified several clusters of activity linked to PurpleDelta, Recorded Future's designation for North Korean IT workers, comprising multiple operators likely based in China. Between late 2024 and early 2025, one cluster applied to jobs at over 1,100 companies, primarily in the software and technology, staffing and consulting, and healthcare and biotechnology sectors. PurpleDelta operators maintained at least 22 fabricated personas across multiple clust

Comments (0)

Sign in to join the discussion

More Like This

Recorded Future Launches 6 New Capabilities for Third-Party Risk
Recorded Future · 6d ago
CopyCop Targets AI Investment in Armenia
Recorded Future · Aug 18, 2026
Malware Crypting Services and the Threat Actors Who Sell Them
Recorded Future · Aug 13, 2026
Mines, Minds, and Machines: The Journey of AI
Recorded Future · Aug 11, 2026
The Hugging Face Hack Was Cheap Persistence at Work
Recorded Future · Aug 10, 2026
July 2026 CVE Landscape
Recorded Future · Aug 7, 2026