> [!hm-nav] > **![Hayden McKenzie's 007 Minion profile picture](attachments/007-minion.png) [[home|HAYDEN MCKENZIE]]** [[home|Home]] [[research|Research]] [[indicators|Indicators]] [[about|About]] > [!hm-brief] > Threat Intelligence and Investigations > > Updated 19 Aug 2026 · 3 reports > [!hm-hero] > LATEST RESEARCH > > # North Korea's Desperate Methods of Recruitment > > 19 Aug 2026 · DPRK Operations > > [![Job-board listings observed during the investigation](attachments/ar-2-kvm-diagram.png)](research/eleven-stages-five-observed-live) > > A unique look at North Korea's laptop hosting, account purchasing, and identity theft assistance requests, displayed publicly across popular forums. > > [[research/eleven-stages-five-observed-live|Read investigation ↗]] [[attachments/north-koreas-desperate-methods-of-recruitment.pdf|PDF ↓]] > [!hm-map] > Tracked aliases > > One note per alias in the `aliases` folder. Every published alias record is drawn onto the map here automatically. > [!hm-archive] > ## Earlier investigations > [!hm-feed] > [[research|All research ↗]] > [!hm-card] > [![Dissecting the Identity Lifecycle — research preview](attachments/p2-s5-3.png)](research/dprk-it-worker-operation-part-two) > > Report 02 / 13 Aug 2026 / DPRK OPERATIONS > > ### [[research/dprk-it-worker-operation-part-two|Dissecting the Identity Lifecycle]] > > An operation's own playbook for identity theft, interviews, and revenue sharing. Eleven stages, from choosing a victim to cashing out. > > [[research/dprk-it-worker-operation-part-two|Read the investigation ↗]] > [!hm-card] > [![How North Korea Outsources Job Fraud at Scale — research preview](attachments/p1-fig5-1.webp)](research/dprk-it-worker-operation-part-one) > > Report 01 / 19 May 2026 / DPRK OPERATIONS > > ### [[research/dprk-it-worker-operation-part-one|How North Korea Outsources Job Fraud at Scale]] > > Inside the Discord network where DPRK operators pay gig workers to submit job applications at scale. > > [[research/dprk-it-worker-operation-part-one|Read the investigation ↗]] > [!hm-indicators] > Services, infrastructure, and techniques observed across the investigations. > > [[indicators|Indicator register ↗]] > [!hm-footer] > **HAYDEN MCKENZIE** · Independent security researcher > > [[research|Research]] · [LinkedIn ↗](https://www.linkedin.com/in/haymcken/) · [Email ↗](mailto:[email protected]) · [Substack ↗](https://substack.com/@haydenmckenzie) · [[attachments/Hayden-McKenzie-CV.pdf|CV ↗]]