[Op Report] Hands-on-Keyboard Activity from the DPRK "PolinRider" Supply Chain Attack

A North Korean-linked threat actor used a sophisticated supply chain attack to compromise a decoy corporate workstation in real time, deploying multi-layered persistence and credential theft tools while masquerading as legitimate Microsoft services—demonstrating the evolving risk to developer and build environments from hands-on-keyboard intrusions.