Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages designed to deploy a Python-based information stealer on…
Tag: North Korea
North Korean Cyber Operations Linked to NullReceiver
North Korean threat actors have been linked to the NullReceiver campaign, which uses trojanized npm packages to deploy malware that decodes C2…
North Korean Hackers Weaponize VS Code and Developer Tools in Supply Chain Attacks
Cybersecurity researchers have uncovered two malicious campaigns linked to North Korean threat actors, exploiting developer tools like Microsoft Visual Studio Code (VS…
Contagious Interview Campaign
A long-running North Korean cyber campaign that typically uses fake job offers and coding tests to lure victims. This iteration uses malvertising…
Lazarus Group: North Korea-Linked Threat Actor
Lazarus Group is a North Korea-linked advanced persistent threat group known for cyber espionage and financially motivated attacks. It exploited CVE-2026-68820 as…
BlueNoroff: North Korean Cybercrime Group
BlueNoroff is a North Korean cybercrime group targeting cryptocurrency exchanges and financial institutions, overlapping with Sapphire Sleet and UNC1069.
Cabbage RAT: PowerShell-Based Remote Access Trojan
Cabbage RAT, also known as CageyChameleon, is a PowerShell-based remote access trojan used by North Korean threat actors for credential and data…
ScarCruft (APT37) – North Korean State-Sponsored Hacking Group
ScarCruft, also known as APT37, is a North Korean state-sponsored hacking group known for spear-phishing campaigns and deploying malware like RokRAT and…
APT37 (ScarCruft) – North Korean Cyber Espionage Group
APT37, also known as ScarCruft, is a North Korean cyber espionage group that has been active since at least 2012. They are…
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
The North Korean state-sponsored hacking group ScarCruft (APT37) has been observed using spear-phishing emails impersonating Microsoft Account security notifications to deliver a…