Python Malware Targeting Developers in Crypto Sector
Python Malware, which is believed to be associated with North Korea, and was responsible for the significant Bybit breach in...
North
North Korean Cybercriminals Utilize BeaverTail Malware through 11 Malicious npm Bundles
The cybercriminals from North Korea involved in the persistent Infectious Discussion initiative are expanding their influence on the npm environment...
North Korean Cybercriminals Posed as Information Technology Staff Attacking UK, European Enterprises, Uncovered by Google
In the United Kingdom, North Korean cybercriminals are applying for IT positions under the guise of legitimate workers, revealed by...
Lazarus Ensemble Focuses on Employment Hunters With ClickFix Strategy to Launch GolangGhost Malware
The threat actors from North Korea responsible for Contagious Interview have embraced the growingly favored ClickFix social engineering strategy to...
ScarCruft from North Korea Uses KoSpy Malware to Spy on Android Users through Deceptive Utility Applications
Recent reports suggest that the group affiliated with North Korea known as ScarCruft has launched a new Android spying software...
Desolate Dexter Sets Sights on 900 Preys Through Facebook Advertisements and Telegram Malicious URLs
A new operation is underway in the Middle East and North Africa, where a customized form of the familiar AsyncRAT...
False job offers aimed at software developers with data snatchers
A group of activities aligned with North Korea tracked by ESET as DeceptiveDevelopment siphons digital assets from victims' crypto wallets...
Phony job propositions target software developers with data stealers
A group of activities seemingly linked to North Korea and monitored by ESET under the name DeceptiveDevelopment is siphoning funds...
Bybit Breach Attributed to Secure{Pocket} Supply Chain Breach Exploited by North Korean Cybercriminals
The Federal Bureau of Investigation (FBI) in the United States officially connected the unprecedented $1.5 billion Bybit breach to threat...
New Linux Malware ‘Auto-Color’ Grants Hackers Full Remote Access to Compromised Systems
Universities and government organizations in North America and Asia have been targeted by a previously undocumented Linux malware called Auto-Color...
Targeted Developer Attacks: Lazarus Group Utilizes Marstech1 JavaScript Implant
Marstech1, an undisclosed JavaScript implant, has been deployed by the notorious Lazarus Group in malicious activities aimed at developers. SecurityScorecard...
PowerShell and Dropbox Utilized by North Korean APT43 in Focused Cyberattacks on South Korea
An affiliated threat entity connected to North Korea has been identified in an active operation aimed at South Korean enterprises,...
A New Cyberattack Sees North Korean Cybercriminals Utilize PowerShell Technique to Seize Control of Devices
There has been a discovery of a novel method employed by the group associated with North Korea - Kimsuky, in...
Kimsuky, a nation-state hacking group associated with North Korea, utilizes the forceCopy virus to pilfer credentials stored in web browsers
Recent discoveries from the Security Intelligence Center at AhnLab have revealed that the hacking collective Kimsuky has been engaged in...
New Campaign from Lazarus Group Aims at Cryptocurrency Wallets through Cross-Platform JavaScript Theft
An ongoing cyber operation associated with North Korea's Lazarus Group has been associated with a fresh scheme that uses fraudulent...
