> [!hm-nav] > ** [[home|HAYDEN MCKENZIE]]** [[home|Home]] [[research|Research]] [[indicators|Indicators]] [[about|About]] # Published investigations > [!hm-feed] > Published articles, newest first. > [!hm-card] > [](research/eleven-stages-five-observed-live) > > Report 03 / 19 Aug 2026 / DPRK OPERATIONS > > ### [[research/eleven-stages-five-observed-live|North Korea's Desperate Methods of Recruitment]] > > A unique look at North Korea's laptop hosting, account purchasing, and identity theft assistance requests, displayed publicly across popular forums. > > [[research/eleven-stages-five-observed-live|Read the investigation ↗]] > [!hm-card] > [](research/dprk-it-worker-operation-part-two) > > Report 02 / 13 Aug 2026 / DPRK OPERATIONS > > ### [[research/dprk-it-worker-operation-part-two|Dissecting the Identity Lifecycle]] > > An operation's own playbook for identity theft, interviews, and revenue sharing. Eleven stages, from choosing a victim to cashing out. > > [[research/dprk-it-worker-operation-part-two|Read the investigation ↗]] > [!hm-card] > [](research/dprk-it-worker-operation-part-one) > > Report 01 / 19 May 2026 / DPRK OPERATIONS > > ### [[research/dprk-it-worker-operation-part-one|How North Korea Outsources Job Fraud at Scale]] > > Inside the Discord network where DPRK operators pay gig workers to submit job applications at scale. > > [[research/dprk-it-worker-operation-part-one|Read the investigation ↗]] > [!hm-footer] > **HAYDEN MCKENZIE** · Independent security researcher > > [[research|Research]] · [LinkedIn ↗](https://www.linkedin.com/in/haymcken/) · [Email ↗](mailto:[email protected]) · [Substack ↗](https://substack.com/@haydenmckenzie) · [[attachments/Hayden-McKenzie-CV.pdf|CV ↗]]