Tag: north-korea
-
Defense contractor pleads guilty to aiding North Korean remote worker scheme
The 62-year-old allowed co-conspirators to use his identity and top secret security clearance to apply for almost 100 jobs last year. The scheme’s success rate was limited. First seen on cyberscoop.com Jump to article: cyberscoop.com/defense-contractor-guilty-north-korea-scheme-facilitator/
-
North Korea Suspected in $6.3B Binance Hack
Cryptocurrency Platform Still Halting Withdrawals. Cryptocurrency platform Binance restored deposits Friday but is still preventing investors from withdrawing cryptocurrency after attackers siphoned $6.3 billion in digital currency, an amount that makes the incident the largest single theft of cryptocurrency to date. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/north-korea-suspected-in-63b-binance-hack-a-33259
-
North Korean hackers blamed for stealing record $6.3B in Binance breach
Hackers working for North Korea are suspected of hacking a Binance employee’s laptop, which allowed the theft of billions in crypto. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/30/north-korean-hackers-blamed-for-stealing-record-6-3b-in-binance-breach/
-
Binance-Hack: 6,3 Mrd. Dollar in wenigen Minuten gestohlen Spur führt nach Nordkorea
Binance-Hack: Hacker stehlen 6,3 Milliarden Dollar. Spuren führen nach Nordkorea. Check Point warnt vor Risiken durch kompromittierte Entwickler-Rechner. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/binance-hack-63-mrd-dollar-in-wenigen-minuten-gestohlen-spur-fuehrt-nach-nordkorea/a46953/
-
Binance Probes DevOps Engineer’s Hacked Laptop After $6.3B Theft
Binance probes a DevOps engineer’s hacked laptop after a $6.3 billion theft linked by researchers to North Korean hackers, and promises to cover all customer losses. First seen on hackread.com Jump to article: hackread.com/binance-devops-engineer-hacked-laptop-billion-theft/
-
The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes
Multiple crypto-tracing firms say notorious North Korean hackers TraderTraitor may be behind the largest digital heist in history”, with billions of crypto likely gone for good. First seen on wired.com Jump to article: www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
-
Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History
Leading cryptocurrency analysts have attributed the cyber-attack to a North Korean elite hacking unit First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/binance-record-hack-crypto-heist/
-
Breach Roundup: Apparently Chinese Hackers Deploy PHP2Shell
Tags: ai, breach, cctv, china, cybercrime, defense, exploit, flaw, hacker, north-korea, oracle, ransomware, spy, ukraineAlso, Hackers Scan for Newly Patched Oracle Flaw and Chinese Cameras Spy Ukraine. This week: PHP2Shell exploits, a bulletproof host shot and an Oracle flaw. Ukrainian man imprisoned for ransomware, AfD breach, Ukraine warned about Dahua cameras, a defense contractor aided North Korean IT workers, Magecart hijack, African cybercrime and Aokigahara stealer targeted AI credentials.…
-
Cryptohack Roundup: CoinDCX Loses $16M
Also: Coinbase Fined 3.25M Euros, Initia Hit by $2.7M Hack. This week, CoinDCX confirmed a $16 million hack, Coinbase Ireland fined 3.25 million euros, New York sought $1.37 billion from NovaTech founders, Initia suffered a $2.7 million exploit, Keystone reported a data breach, the U.S. Department of the Treasury sanctioned North Korean IT workers. First…
-
US sanctions Russians, North Koreans for laundering IT worker earnings
The U.S. Treasury Department sanctioned Russian and North Korean nationals for allegedly laundering the earnings of illicit IT workers on behalf of Pyongyang. First seen on therecord.media Jump to article: therecord.media/north-korea-russia-sanctions
-
US sanctions Russians, North Koreans for laundering IT worker earnings
The U.S. Treasury Department sanctioned Russian and North Korean nationals for allegedly laundering the earnings of illicit IT workers on behalf of Pyongyang. First seen on therecord.media Jump to article: therecord.media/north-korea-russia-sanctions
-
PHP2Shell Actively Exploited, US Cybersecurity Agency Warns
North Koreans Tied to Active Scanning for Critical Vulnerabilities in PHP. The U.S. Cybersecurity and Infrastructure Security Agency sees critical PHP2Shell vulnerabilities being exploited in the wild, and is requiring federal civilian agencies to rapidly mitigate them. Researchers said North Korean hackers are among the many threat actors showing an interest in the flaws. First…
-
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
Tags: cyber, cybersecurity, encryption, espionage, group, kaspersky, korea, lazarus, malware, north-korea, russia, softwareThe North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors.According to Russian cybersecurity company Kaspersky, the campaign has been active since at least July 2025. It’s assessed to pick up First seen…
-
PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts
Cyfirma links PHP2Shell scans of 216 vulnerable hosts to a suspected North Korean campaign using AI to rank public exploits. On October 21, PHP released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on the CVSS scale. The flaws affect all PHP versions that handle web requests. The vulnerable code dates…
-
TrendAI-Studie: So nutzen China, Russland, Nordkorea und Iran KI für Cyberangriffe
Staatliche Hacker nutzen KI für Spionage, Malware und Cyberangriffe. TrendAI zeigt, wie China, Russland, Nordkorea und Iran ihre Strategien verändern. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/trendai-studie-so-nutzen-china-russland-nordkorea-und-iran-ki-fuer-cyberangriffe/a46915/
-
North Korea Hit by Multiple Waves of DDoS Attacks, Knocking Over 40 Websites Offline
Multiple waves of DDoS attacks disrupted North Korea’s internet infrastructure this week, intermittently knocking over 40 official websites offline for about 32 hours. Network monitoring company Kentik linked the outages to synchronized surges of inbound traffic that began on October 20, 2026. Doug Madory, Kentik’s director of internet analysis, noted that aggregate traffic data showed…
-
What We Missed: Feds Lasso Texas Laptop Farms
In this video, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from busting up North Korea’s stateside infrastructure in Operation Lonestar Justice to Staples’ gift card bonanza. First seen on darkreading.com Jump to article: www.darkreading.com/insider-threats/texas-laptop-farms-north-korean-it-workers
-
North Korean Hackers Use Post-Quantum Encryption to Conceal Malware in New Cyberespionage Campaign
Tags: communications, cryptography, cyber, cyberespionage, encryption, finance, group, hacker, infection, korea, lazarus, malicious, malware, north-korea, phishing, software, spear-phishingNorth Korea-linked Lazarus Group used post-quantum cryptography in a cyberespionage campaign targeting South Korean organizations, concealing malware communications and payloads behind a multi-stage infection chain. Dubbed Operation FlashHole, the campaign combined spear-phishing, malicious websites, abuse of financial security software and modular malware that largely operated in memory. The campaign followed Operation SyncHole, a Lazarus operation…
-
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/lazarus-hackers-use-post-quantum-cryptography-for-malware-delivery/
-
Security Affairs newsletter Round 600 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. North Korean IT Workers Used Stolen US Identities to Earn $3 Million U.S. CISA adds Fortinet Multiple…
-
North Korean IT Workers Used Stolen US Identities to Earn $3 Million
The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American companies. Two US nationals were arrested, 14 people…
-
Breach Roundup: French Supermarket Hacks a ‘Wake-Up Call’
e=4>This week: French attack fallout, Ahold Delhaize restored deliveries, North Korean IT worker crackdown, seafood logistics ransomware, Aoki infostealer, Hirudo Trojan, Palo Alto patch, a Russian oil refinery targeted, Poland investigated Pegasus and a suspected cybercrime marketplace admin arrested. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-french-supermarket-hacks-wake-up-call-a-33123
-
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group’s operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/
-
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group’s operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/
-
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to disrupt North Korea’s fraudulent remote IT worker (ITW) scheme.The indictment charges a mix of U.S. citizens and Chinese nationals for their roles in an IT worker conspiracy affecting more than 70 U.S.…
-
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking schemes. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/north-korea-it-worker-raids-arrests-charges/832968/
-
Justice Department says North Koreans have infiltrated dozens of US companies
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/13/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s-companies/
-
FBI raids 40+ laptop farms helping North Korea pocket US tech salaries
North Korean IT workers used stolen and fabricated identities to land remote jobs at more than 70 US companies, with help from Americans who allegedly kept company-issued … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/14/north-korean-it-workers-laptop-farms-arrests/
-
Justice Department says North Koreans have infiltrated dozens of U.S. companies
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/13/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s-companies/
-
DOJ charges 14 over a sprawling North Korean remote work scheme
Operation Lonestar Roundup uncovered an operation that used stolen identities to secretly funnel $3 million from 70 U.S. employers back to Pyongyang. First seen on cyberscoop.com Jump to article: cyberscoop.com/doj-north-korea-remote-work-laptop-farms/