North Korea's abuse of Cloudflare Workers and Pages

Author(s): Kieran Miyamoto
Organization: kmsec

Open article directly

2026-03-13 ⋅ kmsec ⋅ Kieran Miyamoto
First instance of PylangGhost RAT observed on npm
PylangGhost

2026-02-26 ⋅ kmsec ⋅ Kieran Miyamoto
Novel DPRK stager using Pastebin and text steganography

2026-02-22 ⋅ kmsec ⋅ Kieran Miyamoto
Tracking DPRK operator IPs over time

Propose Change North Korea's abuse of Cloudflare Workers and Pages