Cybercrime
Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.
Hi, what are you looking for?
SecurityWeek
All posts tagged "North Korea"
Government
North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.
Cybercrime
Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.
Cybercrime
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
Cybercrime
Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen.
Nation-State
The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.
Supply Chain Security
It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North...
Malware & Threats
The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surveillance.
Malware & Threats
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Supply Chain Security
The PolinRider campaign has compromised more than 100 legitimate open source packages and repositories to deliver a backdoor and information stealer to developers.
Supply Chain Security
A malicious dependency the attackers added to over 140 Mastra packages fetches a payload targeting cryptocurrency extensions.
Nation-State
The campaigns focus on financial organizations, including cryptocurrency, venture capital, and blockchain entities.
Cybercrime
The hackers targeted LayerZero’s DVN, compromising certain RPCs and DDoSing others to trigger failover to the poisoned infrastructure.
Cybercrime
Kejia Wang and Zhenxing Wang compromised the identities of dozens of US persons to help land jobs at over 100 companies.
Artificial Intelligence
The AI giant is taking action after determining that a macOS code signing certificate may have been compromised.
Supply Chain Security
The threat actor behind the Axios supply chain attack has been aiming at other maintainers in its social engineering campaign.
Cybercrime
The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults.
Application Security
A long-lived NPM access token was used to bypass the GitHub Actions OIDC-based CI/CD publishing workflow and push backdoored package versions.
Cybercrime
The 2024 incident was initially linked to China, but an infostealer infection has now revealed North Korean involvement.
Artificial Intelligence
Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.
Artificial Intelligence
Malware & Threats
Malware & Threats
Email Security
