Security Alliance handled two DPRK-related cases during the week, involving a fake Microsoft Teams link and a Telegram account-takeover report, with no reported financial losses. The organization published 11 newly identified domains associated with the DPRK-linked UNC1069 cluster. It also identified SINT-69 as an uncategorized intrusion set using fake Zoom links and disclosed four associated domains.