BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate…
Tag: North Korea
ClickFake Interview: North Korea-Aligned Threat Cluster
ClickFake Interview is a threat cluster tracked by Sekoia, associated with North Korea-aligned actors. It uses ClickFix-like lures to deceive targets into…
Fake Coding Tests Deliver OtterCookie Malware Hidden in SVG Flag Images
North Korean threat actors linked to the Contagious Interview campaign have been observed using steganography in SVG image files to conceal malicious…
Democratic People’s Republic of Korea (DPRK) State-Sponsored Hackers
State-sponsored hacking groups from North Korea known for targeting cryptocurrency and sensitive data, often using social engineering and malware.
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
North Korean threat actors linked to the Contagious Interview campaign have published 108 unique malicious packages and browser extensions across npm, Packagist,…
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup…
Sekoia: Cybersecurity Firm Tracking Threat Actors
Sekoia is a cybersecurity company that monitors and analyzes cyber threats, including state-sponsored groups. They track the ClickFake Interview cluster associated with…
Gaslight macOS Malware Uses Prompt Injection to Bypass AI Analysis
A new macOS malware called Gaslight uses embedded prompt injection strings and fake debugging data to confuse AI-assisted malware analysis tools. It…
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages designed to deploy a Python-based information stealer on…
North Korean Cyber Threat Actors
State-sponsored hackers from North Korea engaged in cyber espionage and cryptocurrency theft, often targeting developers and supply chains.