SEAL triaged three DPRK-linked incidents with combined losses of $3.22 million, including a delayed $3.19 million theft from a device whose wallet extension had been replaced after an April 2026 infection. Two Contagious Interview victims lost another $34,800 through fake job interviews. The report identifies UNC1069 and suspected UNC1069 infrastructure impersonating Microsoft Teams and Zoom, while separately documenting SINT-69's use of a fake Zoom invitation to compromise a Telegram account.