Tag: north-korea
-
‘Moonstone Sleet’ APT Melds Espionage, Financial Goals
North Korea’s newest threat actor uses every trick in the nation-state APT playbook, and most of cybercrime’s tricks, too. It also developed a whole v… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/microsoft-moonlight-sleet-apt-melds-espionage-financial-goals
-
An American Company Enabled a North Korean Scam That Raised Money for WMDs
Wyoming’s secretary of state has proposed ways of preventing fraud and abuse of corporate filings by commercial registered agents in the aftermath of … First seen on wired.com Jump to article: www.wired.com/story/registered-agents-north-korean-scam-wmds/
-
New North Korean Hacking Group Identified by Microsoft
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/new-north-korean-hacking-group/
-
North Korea Building Cash Reserves Using Ransomware, Video Games
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35934/North-Korea-Building-Cash-Reserves-Using-Ransomware-Video-Games.html
-
Moonstone Sleet: A new North Korean threat actor
Microsoft has named yet another state-aligned threat actor: Moonstone Sleet (formerly Storm-1789), which engages in cyberespionage and ransomware atta… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/29/moonstone-sleet-north-korean-threat-actor/
-
RedTail Cryptomining Malware Exploits PAN-OS Vulnerability
Threat Actors Mirror the Tactics of North Korea’s Lazarus Group. Cryptomining malware that might be North Korean in origin is targeting edge devices, … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/redtail-cryptomining-malware-exploits-pan-os-vulnerability-a-25371
-
Novel FakePenny ransomware deployed by North Korean hacking group
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/novel-fakepenny-ransomware-deployed-by-north-korean-hacking-group
-
North Korea’s ‘Moonstone Sleet’ targets victims with malicious tools
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/north-koreas-moonstone-sleet-targets-victims-with-malicious-tools
-
RedTail Malware Abuses Palo Alto Flaw in Latest Cryptomining Campaign
Hackers with possible ties to the notorious North Korea-linked Lazarus Group are exploiting a recent critical vulnerability in Palo Alto Network’s PAN… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/redtail-malware-abuses-palo-alto-flaw-in-latest-cryptomining-campaign/
-
New North Korean Threat Actor Engaging in Espionage, Revenue Generation Attacks
Microsoft dives into the tactics, techniques, and procedures of North Korean threat actor Moonstone Sleet. The post t dives into the tactics, techniqu… First seen on securityweek.com Jump to article: www.securityweek.com/new-north-korean-threat-actor-engaging-in-espionage-revenue-generation-attacks/
-
Microsoft links North Korean hackers to new FakePenny ransomware
‹Microsoft has linked a North Korean hacking group it tracks as Moonstone Sleet to FakePenny ransomware attacks, which have led to millions of dollars… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-links-moonstone-sleet-north-korean-hackers-to-new-fakepenny-ransomware/
-
Microsoft Warns of North Korea’s ‘Moonstone Sleet’
Pyongyang Threat Actor Is After Money and Information. A North Korean hacking group wants to make money for the cash-starved Pyongyang regime and cond… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/microsoft-warns-north-koreas-moonstone-sleet-a-25344
-
DoJ Shakes Up North Korea’s Widespread IT Freelance Scam Operation
Fraudsters based in the US and Europe indicted for helping North Korea’s nation-state groups establish fake freelancer identities and evade sanctions…. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/doj-targets-north-koreas-widespread-it-freelance-scam-operation
-
Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks
The Kimsuky (aka Springtail) advanced persistent threat (APT) group, which is linked to North Korea’s Reconnaissance General Bureau (RGB), has been ob… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/kimsuky-apt-deploying-linux-backdoor.html
-
North Korean Hackers Hijacked Military Officials Personal Email
North Korean hacking groups are suspected of hijacking the personal email accounts of high-ranking military officials. The Defense Ministry confirmed … First seen on gbhackers.com Jump to article: gbhackers.com/north-korean-hackers-hijacked/
-
Feds Bust N. Korean Identity Theft Ring Targeting US Firms
North Korea targeted US companies with stolen identities in a cybercrime scheme. The Justice Department cracks down, seizes websites, and disrupts rev… First seen on hackread.com Jump to article: www.hackread.com/feds-bust-n-korean-identity-theft-ring-us-firms/
-
North Korea-linked Kimsuky used a new Linux backdoor in recent attacks
Symantec warns of a new Linux backdoor used by the North Korea-linked Kimsuky APT in a recent campaign against organizations in South Korea. Symantec… First seen on securityaffairs.com Jump to article: securityaffairs.com/163364/apt/kimsuky-new-linux-backdoor.html
-
North Korean Hackers Deploy New Golang Malware ‘Durian’ Against Crypto Firms
The North Korean threat actor tracked as Kimsuky has been observed deploying a previously undocumented Golang-based malware dubbed Durian as part of h… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/north-korean-hackers-deploy-new-golang.html
-
North Korea-linked IT workers infiltrated hundreds of US firms
The U.S. Justice Department charged five individuals, including a U.S. woman, for aiding North Korea-linked IT workers to infiltrate 300 firms. The Ju… First seen on securityaffairs.com Jump to article: securityaffairs.com/163349/intelligence/north-korea-linked-it-workers-infiltrated-us-firms.html
-
US exposes scheme enabling North Korean IT workers to bypass sanctions
Tags: north-koreaThe US Justice Department had unsealed charges against a US woman and an Ukranian man who, along with three unidentified foreign nationals, have alleg… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/17/north-korean-it-workers/
-
US woman allegedly aided North Korean IT workers infiltrate 300 firms
‹The U.S. Justice Department charged five individuals today, a U.S. Citizen woman, a Ukrainian man, and three foreign nationals, for their involvement… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/five-arizona-ukraine-charged-for-cyber-schemes-infiltrating-over-300-companies-to-benefit-north-koreas-weapons-program/
-
U.S. Govt Announces Rewards up to $5 Million for North Korean IT Workers
The U.S. government has offered a prize of up to $5 million for information that leads to the arrest and severance of North Korean IT workers working … First seen on gbhackers.com Jump to article: gbhackers.com/u-s-govt-announces-rewards/
-
North Korea-linked Kimsuky APT attack targets victims via Messenger
North Korea-linked Kimsuky APT group employs rogue Facebook accounts to target victims via Messenger and deliver malware. Researchers at Genius Securi… First seen on securityaffairs.com Jump to article: securityaffairs.com/163265/apt/north-korea-kimsuky-apt-uses-messenger.html
-
Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms
The US government has announced charges, seizures, arrests and rewards as part of an effort to disrupt a scheme that generates revenue for North Korea… First seen on securityweek.com Jump to article: www.securityweek.com/woman-accused-of-helping-north-korean-it-workers-infiltrate-hundreds-of-us-firms/
-
Arrests made in North Korean remote job scam targeting US firms
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/arrests-made-in-north-korean-remote-job-scam-targeting-us-firms
-
North Korea IT Worker Scam Brings Malware and Funds Nukes
WTH? DPRK IT WFH: Justice Department says N. Korean hackers are getting remote IT jobs, posing as Americans. The post K IT WFH: Justice Department say… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/dprk-remote-it-jobs-richixbw/
-
Kimsuky hackers deploy new Linux backdoor in attacks on South Korea
The North Korean hacker group Kimsuki has been using a new Linux malware called Gomir that is a version of the GoBear backdoor delivered via trojanize… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/kimsuky-hackers-deploy-new-linux-backdoor-in-attacks-on-south-korea/
-
UN report exposes North Korean cyberattacks, crypto laundering spree
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/un-report-exposes-north-korean-cyberattacks-crypto-laundering-spree