Threat Intelligence
Threat centers
North Korean IT Worker Threat Center
How DPRK IT worker schemes operate, the indicators that expose them, threat intelligence on their tools and infrastructure, and what to do if you suspect one.
Explore the Threat Center →
Research reports
Case Files from the Help Desk: A Month of Vishing (Q2 2026)
What does help desk vishing look like in the wild? Across 450 password reset attempts in one month, imper.ai surfaced coordinated impersonation patterns that individual calls alone would have missed.
Detecting DPRK IT Workers: High-Confidence Network & Identity Indicators (Q1 2026)
Four DPRK IT workers detected in a single hiring cohort of 600. Network, device, and identity signals. Zero credentials issued.