Cybercrime $50 Million Radiant Capital Heist Blamed on North Korean Hackers Radiant Capital says a North Korean threat actor stole $50 million in assets in a sophisticated October attack. Ionut ArghireDecember 10, 2024
Nation-State North Korea Deploying Fake IT Workers in China, Russia, Other Countries The North Korean fake IT workers have infiltrated businesses in China, Russia, and other countries aside from the US. Ionut ArghireNovember 25, 2024
Malware & Threats North Korean Hackers Target macOS Users North Korean cryptocurrency thieves caught targeting macOS with fake PDF applications, backdoors and new persistence tactics. Ryan NaraineNovember 7, 2024
Nation-State North Korean Hackers Exploited Chrome Zero-Day for Cryptocurrency Theft The Lazarus APT created a deceptive website that exploited a Chrome zero-day to install malware and steal cryptocurrency. Ionut ArghireOctober 24, 2024
Supply Chain Security North Korean APT Exploited IE Zero-Day in Supply Chain Attack A Pyongyang-aligned APT was caught exploiting a recent zero-day in Internet Explorer in a supply chain attack. Ionut ArghireOctober 18, 2024
Cybercrime North Korean Fake IT Workers Extort Employers After Stealing Data North Korean nationals posing as IT workers have been extorting their employers after gaining insider access. Ionut ArghireOctober 18, 2024
Nation-State North Korea Hackers Linked to Breach of German Missile Manufacturer The targeting of Diehl Defence is significant because the company specializes in the production of missiles and ammunition. Ryan NaraineSeptember 30, 2024
Fraud & Identity Theft Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers Mandiant shines the spotlight on the growing infiltration of US and Western companies by North Korean fake IT workers. Ryan NaraineSeptember 23, 2024
Nation-State North Korean Hackers Lure Critical Infrastructure Employees With Fake Jobs A North Korean group tracked as UNC2970 has been spotted trying to deliver new malware to people in the aerospace and energy industries. Eduard KovacsSeptember 18, 2024
Tracking & Law Enforcement FBI: North Korea Aggressively Hacking Cryptocurrency Firms The FBI warns of North Korean threat actors conducting social engineering campaigns targeting employees in the cryptocurrency industry. Ionut ArghireSeptember 4, 2024
Nation-State Windows Zero-Day Attack Linked to North Korea’s Lazarus APT The vulnerability, tracked as CVE-2024-38193 and marked as ‘actively exploited’ by Microsoft, allows SYSTEM privileges on the latest Windows operating systems. Ryan NaraineAugust 19, 2024
Nation-State Justice Department Disrupts North Korean ‘Laptop Farm’ Operation Law enforcement authorities in the U.S. have arrested a Tennessee man accused of running a “laptop farm” that helped North Korean IT workers secure... Ryan NaraineAugust 12, 2024
Government US Offers $10 Million Reward for Information on North Korean Hacker The US is offering a reward of up to $10 million for information on Rim Jong Hyok, a member of the North Korean hacking... Ionut ArghireJuly 26, 2024
Cybercrime North Korean Charged in Cyberattacks on US Hospitals, NASA and Military Bases A man who allegedly carried out attacks for a North Korean military intelligence agency has been indicted in a conspiracy to hack healthcare firms,... Associated PressJuly 25, 2024
Malware & Threats Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine A fresh Mandiant report documents North Korea's APT45 as a distinct hacking team conducting cyberespionage and ransomware operations. Ryan NaraineJuly 25, 2024
Artificial Intelligence KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware." Ryan NaraineJuly 23, 2024
Cybercrime Hackers Steal Over $2 Million in Cryptocurrency From CoinStats Wallets CoinStats says North Korean hackers drained $2 million in virtual assets from 1,590 cryptocurrency wallets. Ionut ArghireJune 25, 2024
Nation-State New North Korean Threat Actor Engaging in Espionage, Revenue Generation Attacks Microsoft dives into the tactics, techniques, and procedures of North Korean threat actor Moonstone Sleet. Ionut ArghireMay 29, 2024
Tracking & Law Enforcement Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms The US government has announced charges, seizures, arrests and rewards as part of an effort to disrupt a scheme that generates revenue for North... Eduard KovacsMay 17, 2024
Email Security US Says North Korean Hackers Exploiting Weak DMARC Settings The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks. Ionut ArghireMay 3, 2024