Suspected North Korean job applicants claiming to be skilled software developers have sought to infiltrate blockchain technology companies in recent months, security researchers told NK Pro, revealing new details about an ongoing campaign to pilfer funds for the DPRK’s weapons programs.

The revelation comes from an unpublished report provided to NK Pro by American cybersecurity firm Mandiant, which began investigating incidents of suspected North Korean applicants for tech jobs earlier this year.

“These personas are active on a variety of freelance crypto job websites,” Joe Dobson, a senior principal analyst at Mandiant, told NK