Supply Chain Security
The PolinRider campaign has compromised more than 100 legitimate open source packages and repositories to deliver a backdoor and information stealer to developers.
Hi, what are you looking for?
SecurityWeek
All posts tagged "North Korea"
Supply Chain Security
A malicious dependency the attackers added to over 140 Mastra packages fetches a payload targeting cryptocurrency extensions.
Nation-State
The campaigns focus on financial organizations, including cryptocurrency, venture capital, and blockchain entities.
Cybercrime
The hackers targeted LayerZero’s DVN, compromising certain RPCs and DDoSing others to trigger failover to the poisoned infrastructure.
Cybercrime
Kejia Wang and Zhenxing Wang compromised the identities of dozens of US persons to help land jobs at over 100 companies.
Artificial Intelligence
The AI giant is taking action after determining that a macOS code signing certificate may have been compromised.
Supply Chain Security
The threat actor behind the Axios supply chain attack has been aiming at other maintainers in its social engineering campaign.
Cybercrime
The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults.
Application Security
A long-lived NPM access token was used to bypass the GitHub Actions OIDC-based CI/CD publishing workflow and push backdoored package versions.
Cybercrime
The 2024 incident was initially linked to China, but an infostealer infection has now revealed North Korean involvement.
Malware & Threats
Using Windows shortcut files, the APT deployed a new implant, a loader, a propagation tool, and two backdoors.
Cybercrime
Oleksandr Didenko sold the stolen identities of US citizens, allowing North Koreans to get hired using freelance work platforms.
Malware & Threats
The hackers trick victims into accessing GitHub or GitLab repositories that are opened using Visual Studio Code.
Malware & Threats
The North Korean state-sponsored espionage group Kimsuky has targeted government organizations, think tanks, and academic institutions.
Nation-State
Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers.
Malware & Threats
North Korean threat actors are believed to be behind CVE-2025-55182 exploitation delivering EtherRAT.
Cybercrime
Audricus Phagnasay, Jason Salazar, Alexander Paul Travis, Erick Ntekereze, and Oleksandr Didenko have pleaded guilty.
Government
Australia mirrored the US’s recent sanctions against bankers, financial institutions, and others allegedly involved in laundering funds for North Korea.
Cybercrime
The United States has imposed sanctions on a group of bankers, financial institutions and others accused of laundering money from cyber crime schemes.
Nation-State
Lazarus has used fake job offers in attacks targeting companies developing UAV technology, for information theft.
Data Breaches
The physical security firm says its alarm monitoring and system functionality have not been affected.
Artificial Intelligence
Artificial Intelligence
Identity & Access
Artificial Intelligence
Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.
Fraud & Identity Theft
Cybersecurity Funding
