November 8, 2026
- North Korean IT-worker groups are moving laptop infrastructure outside the United States. A report based on more than two million collected Slack messages says multiple groups shifted employer laptops through Pakistan, combined residential proxies with anti-detect tooling and increasingly pursued AI-training work. It also documents OConnect 6.0.3 and the accompanying MediaKey/UCS monitoring software. · Threat Activity & Operations
in Keyeroo Turns Legacy NTLM Into Signed LDAP Relay on Patched DCs