v1 → v2
Scores
trust_score0 → 0
severity_base— → —
score_modifier0 → 0
Sections
Campaign Overview and Attribution → Threat Actor Overview and Attribution
unchanged
Scale and Target Profile → Campaign Scale and Targeting
unchanged
Attack Chain and Delivery Mechanism → Social Engineering and Impersonated Companies
unchanged
Malware: Overlord Framework and Platform-Specific Payloads → Attack Chain and Delivery Mechanism
unchanged
Credential and Cryptocurrency Theft Capabilities → Malware: Overlord Framework and Platform-Specific Payloads
unchanged
Relationship to Prior DPRK Developer-Targeting Campaigns → Credential and Cryptocurrency Theft Capabilities
unchanged
Risk to Cryptocurrency Firms and Developers → Losses Attributed
unchanged
(section 8) → Relationship to Known North Korean Developer-Targeting Clusters
unchanged
(section 9) → Government Attribution and Regulatory Status
unchanged
(section 10) → Risk to Cryptocurrency Firms and Developers
unchanged
Timeline events
+ added2026-05 — (no description)
+ added2026-06 — (no description)
- removed2026-05-31 — (no description)
- removed2026-06-08 — (no description)
~ changed2026-04: “” → “”
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v1 hash: 53a8a46d530dbaad520a3b67041ea50723ecb86d9766cd66e2410b5969ea1275
v2 hash: d0c1acc87bd42dbfe73a4a91f4b1cbba27454d05babf7b934a1b9063c7ac5443