Security Alliance observed DPRK operators reactivating intrusions first established six to twelve months earlier and searching retained access for valuable opportunities. DPRK-related incidents caused losses of 1.7 BTC and 14.2 ETH, including a fake Microsoft Teams invitation that accounted for 1.7 BTC and 5.7 ETH. The report also identifies fake job-interview activity and malicious infrastructure associated with Contagious Interview, SINT-01/TA444/Konni, and UNC1069.