DPRK RevGen: Domestic Enabler Initiative is a threat campaign tracked across 4 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed November 17, 2025; most recent activity May 7, 2026.
DPRK RevGen: Domestic Enabler Initiative is described as a North Korean state-backed effort to recruit and deploy domestic information technology workers to support illicit operations, including fraud schemes and other cyber-enabled activities. It highlights DPRK's strategy to monetize IT talent and circumvent sanctions by leveraging domestic enablers, with cross-border enforcement actions illustrating its reach.
Two U.S. nationals, Kejia Wang and Zhenxing Wang, were sentenced for facilitating a fraudulent scheme that allowed North Korean IT workers to pose as U.S. residents and secure jobs at over 100 companies, generating more…
Matthew Issac Knoot and Erick Ntekereze Prince were sentenced to 18 months in prison for facilitating a scheme that allowed North Korean IT workers to fraudulently obtain remote jobs at U.S. companies. The duo hosted…
Five individuals have pleaded guilty to facilitating North Korean operatives in obtaining remote IT jobs at U.S. companies by using false and stolen identities. The U.S. Department of Justice has also seized $15 million…
South Korean authorities suspect that North Korea's Lazarus Group was behind a hack of Upbit, resulting in losses of approximately $30.4 million. The breach involved unusual activity in Solana tokens and led Upbit to…