North Korea’s overseas IT workers are reportedly expanding their European operations to raise illicit funds for the regime’s goals with the support of “facilitators,” while simultaneously ramping up extortion campaigns against companies they have infiltrated.

Google Threat Intelligence Group (GTIG) said in a report released on Wednesday that DPRK IT worker operations have advanced rapidly in threat, scope and scale in recent months, particularly marked by an increase in active operations in Europe.

The new report echoes the findings of Google’s global threat assessment released last month, but expands on the search giant’s previous warningwith additional details about the