DPRK IT Workers | A Network of Active Front Companies and Their Links to China – SentinelOne

One such front company is Chosun Expo, which is based in China and is known to be involved in cyber attacks on behalf of the DPRK. Chosun Expo has been linked to several high-profile attacks, including the 2014 Sony Pictures hack and the WannaCry ransomware attack in 2017.

Another front company that has been linked to the DPRK is Korea Heungjin Trading Company, which is also based in China. This company has been involved in the sale of weapons and other illicit goods on behalf of the DPRK, and has also been implicated in cyber attacks.

These front companies operate as a network, with links to each other and to other organizations in China and elsewhere. They serve as a front for the DPRK’s cyber activities, allowing the regime to carry out attacks and other illicit activities while maintaining plausible deniability.

It is important for countries and organizations to be aware of these front companies and their links to the DPRK, in order to protect themselves from potential cyber attacks and other threats. By understanding the network of active front companies that the DPRK operates, countries can better defend against the regime’s malicious activities and disrupt its ability to carry out cyber attacks.