North Korea

Threatpost 

Dtrack RAT is Behind Virulent ATM-Espionage Campaign

September 24, 2019 TH Author apt, atm, dtrack, espionage, Government, india attacks, Kaspersky, Lazarus Group, Malware, Malware analysis, North Korea

Seen this month attacking victims in India, the Dtrack malware is bent on financial gain and high-end spying. READ MORE HERE…

Read more

Threatpost 

U.S. Sanctions North Korean Group Behind WannaCry, Sony Hacks

September 16, 2019 TH Author Andariel, bangladesh central bank, Bluenoroff, Government, hack, Hacks, Lazarus Group, North Korea, ransomware, Sony picture hack, SWIFT, threat group, US, us sanctions, wannacry attack

Three North Korean threat groups have been sanctioned in the U.S. as part of a larger U.S. initiative against North Korea-linked malicious cyber activity. READ MORE HERE…

Read more

Threatpost 

North Korean Spear-Phishing Attack Targets U.S. Firms

September 13, 2019 TH Author attachment, attack, autumn aperture, Email, Kimsuky, Kodak FlashPix, malicious document, malicious email, Malware, North Korea, nuclear deterrance, Phishing, social engineer, spearphishing, Trojan, Web Security

Researchers warn that U.S. firms are being targeted with legitimate – but trojanized – documents that are often socially engineered to a tee. READ MORE HERE…

Read more

Threatpost 

North Korea’s Hidden Cobra Strikes U.S. Targets with HOPLIGHT

April 12, 2019 TH Author active attacks, apt, Businesses, Government, Hidden Cobra, hoplight, Lazarus Group, Malware, Malware analysis, North Korea, US government

The custom malware is a spy tool and can also disrupt processes at U.S. assets. READ MORE HERE…

Read more

Threatpost 

Lazarus Group Widens Tactics in Cryptocurrency Attacks

March 28, 2019 TH Author apt, campaign, Cryptocurrency, Cryptography, Government, Lazarus Group, macos users, Malware, North Korea, South Korea, Web Security, widened tactics, Windows

MacOS users, as well as Windows, are in the cross-hairs, especially those based in South Korea. READ MORE HERE…

Read more

Threatpost 

U.S. Government Goes After North Korea’s Joanap Botnet

January 31, 2019 TH Author botnet, Government, Hidden Cobra, joanap botnet, Lazarus Group, Malware, Microsoft Windows, North Korea, Park Jin Hyok

The Department of Justice is looking to dismantle the Joanap botnet, which has been built and controlled by North Korea-linked hackers since 2009. READ MORE HERE…

Read more

Threatpost 

NOKKI Malware Sports Mysterious Link to Reaper APT Group

October 2, 2018 TH Author apt 37, deobfuscation, dogcall, Malware, Malware analysis, North Korea, Reaper, remote access Trojan

The relationship between the malware and the APT group remains somewhat murky. READ MORE HERE…

Read more

Threatpost 

U.S. Ties Lazarus to North Korea and Major Hacking Conspiracy

September 6, 2018 TH Author attribution, Bangladesh, breach, conspiracy, Government, Hacks, Justice Department, Lazarus, Lockheed Martin, Malware, North Korea, official, sony pictures, SWIFT, Vulnerabilities, WannaCry

The DoJ said a DPRK spy, Park Jin-hyok, was involved in “a conspiracy to conduct multiple destructive cyberattacks around the world.” READ MORE HERE…

Read more

Threatpost 

RedDawn Espionage Campaign Shows Mobile APTs on the Rise

May 18, 2018 TH Author Android malware, defectors, espionage campaign, Facebook, google play, Government, Malware, McAfee, mobile apt, North Korea, reddawn, sun team

The Sun Team APT, likely linked to North Korea, uses Google Play and Facebook as attack vectors. READ MORE HERE…

Read more