Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRKThe Hacker News·Apr 3, 15:07 UTC · Apr 3, 2026Phishing & fraud55
US Government Warns Firms to Avoid Hiring North Korean IT WorkersInfosecurity Magazine·May 17, 16:30 UTC · May 17, 2022Threat actor60
North Korea's Fake IT Worker Scheme Sets Sights on EuropeInfosecurity Magazine·Apr 2, 12:00 UTC · Apr 2, 2025Ransomware60
DPRK fund malicious cyber activities with ransomware attacks on critical InfrastructureSecurity Affairs·Feb 10, 22:05 UTC · Feb 10, 2023RansomwareCVE-2021-20038CVE-2022-2499060
New EtherRAT backdoor surfaces in React2Shell attacks tied to North KoreaSecurity Affairs·Dec 10, 14:45 UTC · Dec 10, 2025MalwareCVE-2025-5518260
⚡ Weekly Recap — SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and MoreThe Hacker News·Jul 28, 15:57 UTC · Jul 28, 2025Malware in the wildCVE-2025-49706CVE-2025-49704CVE-2025-20281+27 CVEs60
Treasury Department sanctions entities tied to North Korean IT scams, hackingCyberScoop·May 23, 17:19 UTC · May 23, 2023Phishing & fraud in the wild60
U.S. offers up to $5M rewards for info on North KoreaSecurity Affairs·Apr 16, 10:26 UTC · Apr 16, 2020Ransomware60
⚡ Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & MoreThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2025Malware in the wildCVE-2025-55177CVE-2025-43300CVE-2025-907460
Treasury slaps sanctions on people, companies tied to North Korean IT worker schemesCyberScoop·Jul 8, 19:18 UTC · Jul 8, 2025Policy & legal in the wild60
U.S. Arrests Facilitator in North Korean IT Worker Scheme; Seizes 29 Domains and Raids 21 Laptop FarmsThe Hacker News·Jul 1, 17:49 UTC · Jul 1, 2025Threat actor60
North Korean supply chain attacks prompt joint warning from Seoul and LondonThe Record·Nov 24, 13:10 UTC · Nov 24, 2023Ransomware60
US Warns Critical Sectors Against North Korean Ransomware AttacksInfosecurity Magazine·Feb 10, 17:00 UTC · Feb 10, 2023RansomwareCVE-2021-20038CVE-2022-2499060
South Korea sanctions 15 North Koreans for IT worker scams, financial hacking schemesCyberScoop·Dec 26, 21:14 UTC · Dec 26, 2024Phishing & fraud in the wild60
Cryptocurrency hackers stole $2.2 billion from platforms in 2024Help Net Security·Dec 19, 00:00 UTC · Dec 19, 2024Vulnerability55
US sanctions North Korean ‘Kimsuky’ hackers after surveillance satellite launchThe Record·Dec 1, 18:26 UTC · Dec 1, 2023Threat actor60
U.S. Offers Rewards up to $5 Million for Information on North Korean HackersThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2020Ransomware60
How North Korea Revolutionized the Internet as a Tool for Rogue RegimesRecorded Future·Apr 23, 00:00 UTC · Apr 23, 2019Threat actor60
US nationals sentenced for aiding North Korea’s tech worker schemeCyberScoop·Apr 16, 23:06 UTC · Apr 16, 2026Policy & legal in the wild60
North Korean companies, people sanctioned for money laundering from cybercrime, IT worker schemesCyberScoop·Nov 4, 20:48 UTC · Nov 4, 2025Policy & legal in the wild160
Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean HackersThe Hacker News·Feb 27, 12:24 UTC · Feb 27, 2025Data breach60
North Korean IT Worker Fraud Linked to 2016 Crowdfunding Scam and Fake DomainsThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2025Phishing & fraud55
North Korean Hackers Target Critical Infrastructure for Military GainInfosecurity Magazine·Jul 26, 11:02 UTC · Jul 26, 2024Ransomware60
Arizona woman arrested and charged in North Korean IT worker schemeCyberScoop·May 16, 19:23 UTC · May 16, 2024Policy & legal in the wild60
North Korean hackers are targeting software developers and impersonating IT workersHelp Net Security·Oct 20, 00:00 UTC · Oct 20, 2023RansomwareCVE-2023-4279360
Latest North Korean hack targeting cryptocurrency shows troubling evolution, experts sayCyberScoop·Jul 24, 16:38 UTC · Jul 24, 2023Ransomware in the wild60
U.S. offers $5 million for info on North Korean cyber operatorsThe Record·Jan 13, 00:00 UTC · Jan 13, 2023Ransomware60
Treasury updates Lazarus Group sanctions with digital currency address linked to Ronin Bridge hackCyberScoop·Apr 14, 18:29 UTC · Apr 14, 2022Threat actor in the wild60
Treasury sanctions, DOJ charges two Chinese nationals for helping North Korean hackersCyberScoop·Mar 2, 21:59 UTC · Mar 2, 2020Policy & legal in the wild60
Pentagon, FBI, DHS jointly expose a North Korean hacking effortCyberScoop·Feb 14, 21:50 UTC · Feb 14, 2020Exploit / PoC in the wild60
North Korea's IT worker scheme funds Russia's war effortCyberScoop·Jul 21, 16:05 UTC · Jul 21, 2026Data breach60
State-sponsored actors, better known as the friends you don’t wantCisco Talos·May 12, 10:00 UTC · May 12, 2026Threat actor60
Google warns artificial intelligence is accelerating cyberattacks and zeroSecurity Affairs·May 11, 14:06 UTC · May 11, 2026Ransomware in the wild60
Hackers Observed Using AI to Develop ZeroInfosecurity Magazine·May 11, 13:00 UTC · May 11, 2026Exploit / PoC60
American duo sentenced for hosting laptop farms for North Korean IT workersCyberScoop·May 7, 13:56 UTC · May 7, 2026Policy & legal in the wild60
New Jersey men given lengthy sentences for running North Korean laptop farmsThe Record·Apr 16, 16:41 UTC · Apr 16, 2026Malware55
Security Affairs newsletter Round 572 by Pierluigi PaganiniSecurity Affairs·Apr 12, 08:34 UTC · Apr 12, 2026Ransomware in the wildCVE-2026-35616CVE-2026-2576960
APT37 combines cloud storage and USB implants to infiltrate airSecurity Affairs·Mar 2, 12:38 UTC · Mar 2, 2026Threat actor60