North Korea’s remote-worker networks
OFAC designated 10 people and one entity, alleging that Russian intermediaries and North Korean teams used cryptocurrency and other transfers to move millions from fraudulent remote work.
Preview this case →THE SPY REGISTER MEMBER EDITION
Spy Register Membership
Your story or case file will be waiting after checkout.
Follow the operations, betrayals and agency rivalries through the reporting and the original records.
Thank you to our 3,000+ members.
144 published reports · 143 case files to explore
Your intelligence reading desk.
- The Dossier
Follow each case through its chronology, related reports and source records. Keep the names, dates and documents together.
- The Brief
Catch up on the past 72 hours of published reporting, arranged by agency, with the background alongside it.
- Your saved reports
Build a personal reading list that follows your account across devices.
- Member articles
Read stories marked for members, alongside the public news edition.
Preview The Dossier → · Preview The Brief →
Current news and most archive reporting remain open. Selected features are reserved for members. Membership brings the case files, briefing and personal reading desk together.
BEST VALUE · ANNUAL
$6.67 / month equivalent
$80 billed annually
Save $16 a year compared with monthly billing.
Subscribe annually · $80Renews at $80 every year until cancelled.
MONTHLY
$8 / month
The same member edition. Pay monthly.
Subscribe monthly · $8Renews at $8 each month until cancelled.
Prices in US dollars; applicable tax shown at checkout. Cancel renewal through My account; access continues through your paid period.
Sign in with ChatGPT, then pay securely with Stripe.
ON THE READING DESK
Cases you can follow.
Russia-linked industrial control sabotage
Cyber Command and Army CID are investigating clustered commissary failures at six or more U.S. bases. Officials have announced no conclusion or culprit; the inquiry follows confirmed refrigeration sabotage in France.
Preview this case →FrostyNeighbor destructive attack on Ukrainian transport manufacturer
FrostyNeighbor moved from espionage tooling to a destructive script, according to ESET. The victim, damage and motive remain undisclosed.
Preview this case →Before you subscribe.
What can I read before paying?
Read the public news edition and preview the member products. The Dossier and The Brief bring published reporting into a structured reading desk. Articles marked for members require an active subscription.
How do I get access?
Choose a plan, sign in with ChatGPT and complete payment with Stripe. Use that same ChatGPT account whenever you return. Your account shows your payment status and member reading desk.
Can I cancel online?
Yes. Open My account, then Manage billing & cancellation. Cancel before your next renewal to stop future charges. Access continues until the end of the period you paid for.
Does membership sign me up for email?
The Brief is read on the website. The Dispatch is a separate email signup with confirmation; buying membership does not subscribe you to email.