North Korea

North Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacksNorth Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacks

North Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacks

ReversingLabs researchers linked the VMConnect campaign to the North Korea-linked APT group Labyrinth Chollima. ReversingLabs researchers believe that the North…

2 years ago
Lazarus APT exploits Zoho ManageEngine flaw to target an Internet backbone infrastructure providerLazarus APT exploits Zoho ManageEngine flaw to target an Internet backbone infrastructure provider

Lazarus APT exploits Zoho ManageEngine flaw to target an Internet backbone infrastructure provider

The North Korea-linked Lazarus group exploits a critical flaw in Zoho ManageEngine ServiceDesk Plus to deliver the QuiteRAT malware. The…

2 years ago
FBI identifies wallets holding cryptocurrency funds stolen by North KoreaFBI identifies wallets holding cryptocurrency funds stolen by North Korea

FBI identifies wallets holding cryptocurrency funds stolen by North Korea

The U.S. FBI warned that North Korea-linked threat actors may attempt to cash out stolen cryptocurrency worth more than $40…

2 years ago
N. Korean Kimsuky APT targets S. Korea-US military exercisesN. Korean Kimsuky APT targets S. Korea-US military exercises

N. Korean Kimsuky APT targets S. Korea-US military exercises

North Korea-linked APT Kimsuky launched a spear-phishing campaign targeting US contractors working at the war simulation centre. North Korea-linked APT…

2 years ago
Experts believe North Korea behind JumpCloud supply chain attackExperts believe North Korea behind JumpCloud supply chain attack

Experts believe North Korea behind JumpCloud supply chain attack

SentinelOne researchers attribute the recent supply chain attacks on JumpCloud to North Korea-linked threat actors. JumpCloud is a cloud-based directory…

2 years ago
Experts detected a new variant of North Korea-linked RUSTBUCKET macOS malwareExperts detected a new variant of North Korea-linked RUSTBUCKET macOS malware

Experts detected a new variant of North Korea-linked RUSTBUCKET macOS malware

Researchers spotted a new version of the RustBucket Apple macOS malware that supports enhanced capabilities. Researchers from the Elastic Security…

2 years ago
North Korea-linked Andariel APT used a new malware named EarlyRat last yearNorth Korea-linked Andariel APT used a new malware named EarlyRat last year

North Korea-linked Andariel APT used a new malware named EarlyRat last year

North Korea-linked cyberespionage group Andariel used a previously undocumented malware called EarlyRat. Kaspersky researchers reported that the North Korea-linked APT group Andariel used a previously…

2 years ago
Experts detail a new Kimsuky social engineering campaignExperts detail a new Kimsuky social engineering campaign

Experts detail a new Kimsuky social engineering campaign

North Korea-linked APT Kimsuky has been linked to a social engineering campaign aimed at experts in North Korean affairs. SentinelLabs researchers uncovered…

2 years ago
Kimsuky APT poses as journalists and broadcast writers in its attacksKimsuky APT poses as journalists and broadcast writers in its attacks

Kimsuky APT poses as journalists and broadcast writers in its attacks

North Korea-linked APT group Kimsuky is posing as journalists to gather intelligence, a joint advisory from NSA and FBI warns.…

2 years ago
The US government sanctioned four entities and one individual for supporting cyber operations conducted by North KoreaThe US government sanctioned four entities and one individual for supporting cyber operations conducted by North Korea

The US government sanctioned four entities and one individual for supporting cyber operations conducted by North Korea

The US Department of the Treasury sanctioned four entities and one individual for their role in cyber operations conducted by…

2 years ago