GitLab Threat Intelligence Team reveals North Korean tradecraft

North Korean threat actors are rapidly evolving their tradecraft by leveraging fake IT worker personas, synthetic identities, and sophisticated malware campaigns on legitimate platforms like GitLab to generate revenue, conduct cyber operations, and evade detection, as revealed by GitLab’s disruption and intelligence sharing efforts.