Vincas Ciziunas

Come Play, Supreme Leader! DPRK Remote Workers and the Culture of Evony Online

A recent indictment against a DPRK IT worker facilitator network generated $6.8m for the DPRK weapons program. Nisos OSINT investigators investigated these networks for numerous clients over the last two years. In this presentation, we will discuss the investigative techniques used to identify the hallmarks of this activity, and share the methods we are using to continue to build out the network of fraudulent actors.


Vincas is an Intelligence Fellow for Nisos where he leads research and technical operations against malicious actors conducting fraud, computer network exploitation, and disinformation operations. Prior to Nisos, Vincas served as a remote operator for the intelligence community for 15 years leading technical operations against nation-state computer network exploitation units. He was involved in all aspects of computer network exploitation efforts, developing some of the most bleeding-edge tools to combat foreign nation-states. Prior to that, Vincas worked at Counterpane Internet Security at the forefront of incident response.

S1_LABScon-2024_HeadshotEffect_Ciziunas-Vincas