North Korean Threat Actors Targets Security Researchers
North Korean threat actors have used social media sites like X to build rapport with their targets. In recent case, they built a collaboration with a security researcher. After initial…
JumpCloud attack attributed to Labyrinth Chollima
JumpCloud cloud directory-as-a-service provider unfazed a cyberattack that first came to light, which has been attributed to a North Korean hacking group. The attack was first detected as anomalous activity…
3CX Application Malvertised
Hackers have compromised 3CX, a popular videoconferencing and business phone management application used by more than 600,000 companies. Research providers issued multiple warnings during this week on this compromise. It…
APT-43 Elite North Korean Group
Researchers from Mandiant has spotted a North Korean APT group that uses crypto theft to fund its main goal of cyber-espionage for the Kim Jong-un regime. To be precise, APT43…
DTrack Revised Version used by Lazarus Group
Researchers from Kaspersky came with a warning about North Korea-linked APT Lazarus using a new version of the DTrack backdoor to attack organizations in Europe and Latin America. DTrack is…
UNC4034 Trojanizing PuTTY
North Korean-based threat actors UNC4034 are using trojanized versions of the PuTTY SSH open-source terminal emulator to install backdoors on victims' devices. The campaign, trying to trick victims into clicking…
Holy Ghost Ransomware
Holy Ghost, a tiny ransomware operator likely being managed by North Korean hackers. Microsoft Threat Intelligence Center has been tracking the malware variant and has found multiple evidence pointing to…
Maui Ransomware – North Korea backed
North Korean state sponsored threat actors are seen using a custom ransomware variant known as Maui targeting healthcare sector. Maui is a relatively new ransomware strain, the samples of Maui…