North Korea – TheCyberThrone

UNC4736 DRIFT: The Governance Failure Inside Multisig

The Incident (Raw Facts) On April 1, 2026, Drift Protocol (a Solana-based derivatives exchange) suffered a $285 million breach in what forensic teams attributed with medium-high confidence to UNC4736, a…

PravinKarthik April 6, 2026

North Korean PurpleBravo Targets Developers in Contagious Interview Campaign

PurpleBravo, a North Korean state-sponsored threat group, has escalated its cyber espionage efforts by targeting software developers through fake job interviews. Linked to the "Contagious Interview" campaign first noted in…

PravinKarthik February 1, 2026

Kimsuky leaverages DMARC Misconfiguration in its Phishing Campaign

Security researchers from Barracuda has uncovered that the North Korean (APT) group Kimsuky has been leveraging DMARC misconfigurations to run highly targeted spear-phishing campaigns, threatening both private and public sectors…

PravinKarthik October 8, 2024

North Korean Citrine Sleet behind CVE-2024-7971 exploitation

Microsoft’s threat intelligence team discovered that a known North Korean threat actor exploiting a Chrome remote code execution flaw patched by Google earlier this month. The vulnerability, tracked as CVE-2024-7971,…

PravinKarthik September 1, 2024

Microsoft Flaw CVE-2024-38193 exploited by Lazarus Group

During this month patch Tuesday, microsoft addressed nearly 90 flaws, some of which have already been exploited by hackers. One specific vulnerability, CVE-2024-38193 with a CVSS score of 7.8, is…

PravinKarthik August 20, 2024

Hacker turned Employee got recruited by KnowBe4

KnowBe4, a US-based security vendor, revealed that it unwittingly hired a North Korean hacker who attempted to load malware into the company's network. KnowBe4 operates in 11 countries and is…

PravinKarthik July 27, 2024

Money Heist by North Korean DPRK in 2023

A recent report shows that the North Korean hackers stole at least $600m in cryptocurrency in 2023, around a third of the total value of such heists. Despite the heists,…

PravinKarthik January 8, 2024

North Korean Threat Actors leverages TeamCity Security Bug

Researchers at Microsoft have discovered that North Korean nation-state threat actors tracked as Diamond Sleet and Onyx Sleet are exploiting a remote code execution vulnerability affecting multiple versions of the…

PravinKarthik October 22, 2023