This report is a collaboration that incorporates analysis from several leading Information Sharing and Analysis Centers (ISACs), including Crypto ISAC, Oil and Natural Energy ISAC (ONE-ISAC), Real Estate ISAC, Tribal ISAC, WaterISAC, the Faith-Based Information Sharing and Analysis Organization (ISAO), and Gate 15.
Over the last few months, there has been much reporting on threats relating to remote North Korean IT workers. Some critical infrastructure sectors, as well as other communities, experienced this threat directly, with a variety of impacts. Different communities have not yet directly observed this threat, but they are still strongly encouraged to understand it and consider the recommendations in this report. In addition, through conversations the authors and contributors of this report have had with security partners, private sector entities, and U.S. government partners, we believe that most organizations do not fully appreciate the extent of this threat. We are sharing this report to encourage leaders to pause, take the time to understand the threat, consider the mitigation guidance, and have the appropriate conversations with members across their organizations to educate them and collaborate with them to reduce the risk from this relatively new but likely enduring threat.
Access the complete report below.
Enjoy our podcasts! Read more about Gate 15’s full podcast menu at our Podcast page. You can subscribe and enjoy all the Gate 15 Podcasts on Spotify for Podcasters, Apple, Spotify, as well as other locations accessible from the Spotify for Podcasters link.
Gate 15: Technology-enhanced, human-driven, homeland security risk management.

Understand the Threats.
Assess the Risks.
Take Action.
