About Us

NorthScan is a threat intelligence initiative focused on uncovering North Korean IT worker infiltration and the impersonation techniques these actors use to bypass traditional security measures. By combining Human Intelligence (HUMINT) collection with structured Open-Source Intelligence (OSINT) analysis, we deliver actionable intelligence that reveals how these threat actors operate, adapt, and target organizations worldwide.

Why It Matters

Human Layer Blind Spots

Threat actors exploit trust through impersonation and social engineering. These identity-driven and human layer threats are often overlooked.

Pattern Recognition

By mapping North Korean IT worker campaigns and social engineering tactics, we deliver behavioral indicators that enable defenders to act early.

Adaptive Adversaries

North Korean IT operatives adapt their tradecraft faster than IOC-driven intelligence can follow, requiring proactive monitoring and a holistic, behavior-focused approach.

Who We Are

NorthScan is built on a multidisciplinary foundation in Threat Intelligence, Blockchain Intelligence, Open-Source Intelligence (OSINT), and Human Intelligence (HUMINT). This diverse background shapes a distinctive perspective on cyber adversaries, with a focus on deception, impersonation, and infiltration tactics.

Author

Heiner

Security Alliance Radar