SEAL recorded four DPRK-related cases, including UNC1069 fake Teams invitations, an interrupted Contagious Interview repository attack, a $35,000 PolinRider loss, and research into the UNK_DeadDrop job-lure cluster. The Contagious Interview repository abused `.vscode/tasks.json` to run a shell command, retrieve a Vercel-hosted bootstrap, establish persistence, and launch obfuscated JavaScript. UNK_DeadDrop used Overlord RAT infrastructure, recruitment domains, mass-mailed job offers, and a ClickFix verification command, while new UNC1069 infrastructure included multiple Teams-themed domains. SINT-69 remained uncategorized but closely followed UNC1069 techniques involving compromised Telegram contacts, fake meetings, and command-paste instructions.