North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware
Nov 28, 2025Ravie LakshmananSupply Chain Attack / Malware The North Korean threat actors behind the Contagious Interview campaign have continued...
Korean
North Korean threat actors use JSON sites to deliver malware via trojanized code
North Korean threat actors use JSON sites to deliver malware via trojanized code Pierluigi Paganini November 17, 2025 North Korean...
North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels
Nov 14, 2025Ravie LakshmananMalware / Threat Intelligence The North Korean threat actors behind the Contagious Interview campaign have once again...
Detecting fraudulent North Korean hires: A CISO playbook
The North Korean worker scheme has expanded into a global threat. Although it originally focused on U.S. technology companies, the...
North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware
The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality of...
AI Gone Rogue – What Anthropic’s Report Means for Cybersecurity
When a North Korean scammer asks Claude "what is a muffin?" it seems innocent enough. When that same person uses...
OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities
The North Korean threat actors behind the Contagious Interview campaign have been observed using updated versions of a cross-platform malware...
North Korean Cybercriminals Utilize BeaverTail Malware through 11 Malicious npm Bundles
The cybercriminals from North Korea involved in the persistent Infectious Discussion initiative are expanding their influence on the npm environment...
North Korean Cybercriminals Posed as Information Technology Staff Attacking UK, European Enterprises, Uncovered by Google
In the United Kingdom, North Korean cybercriminals are applying for IT positions under the guise of legitimate workers, revealed by...
Lazarus Ensemble Focuses on Employment Hunters With ClickFix Strategy to Launch GolangGhost Malware
The threat actors from North Korea responsible for Contagious Interview have embraced the growingly favored ClickFix social engineering strategy to...
Targeted Developer Attacks: Lazarus Group Utilizes Marstech1 JavaScript Implant
Marstech1, an undisclosed JavaScript implant, has been deployed by the notorious Lazarus Group in malicious activities aimed at developers. SecurityScorecard...
Malicious Actors from North Korea Use FERRET Malware Through Deceptive Employment Meetings on macOS
The clandestine individuals from North Korea associated with the Infectious Discussion initiative have been detected dispatching a series of Apple...
React Admin Panel Enables Lazarus Group to Manage Worldwide Cyber Offensives
Recent sightings reveal that the Lazarus Group, a prominent threat entity from North Korea, is utilizing a "browser-based control center"...
Legal Action Against 5 Suspects for Violations in $866K North Korean IT Employee Plan
The Department of Justice in the United States formally charged two individuals from North Korea, one person from Mexico, and...
North Korean Computer Specialist Deception Associated with 2016 Fundraising Swindle and Phony Websites
Information security analysts have uncovered connections in infrastructure between the North Korean cybercriminals involved in the deceptive computer specialist ploys...
