AstrillVPN: VPN Service Used by Suspected DPRK Operatives
AstrillVPN is a VPN service whose exit nodes were identified in the investigation as part of the infrastructure used by suspected DPRK…
Tag: DPRK
North Korean Remote Workers Infiltrating Government and Businesses: How to Expose Them Before Hiring
North Korean IT workers are increasingly infiltrating government agencies and businesses by applying for remote jobs, passing interviews, and obtaining legitimate credentials.…
NorthScan: Threat Intelligence and Security Research
NorthScan, represented by Heiner García, contributed to the investigation by analyzing infrastructure and behavioral patterns of suspected DPRK operatives, helping to identify…
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake…
Fake Coding Tests Deliver OtterCookie Malware Hidden in SVG Flag Images
North Korean threat actors linked to the Contagious Interview campaign have been observed using steganography in SVG image files to conceal malicious…
DPRK (North Korea) Cyber Threat Activity
State-sponsored threat actors from North Korea (DPRK) are known for sophisticated cyber operations targeting cryptocurrency, defense, and technology sectors. This campaign uses…