Google: North Korean gov’t hackers used Internet Explorer zeroThe Record·Jan 9, 00:00 UTC · Jan 9, 2023Exploit / PoCCVE-2022-4112860
North Korean hackers exploit Itaewon tragedy to infiltrate South Korean targetsCyberScoop·Dec 7, 21:00 UTC · Dec 7, 2022Exploit / PoC in the wildCVE-2022-4112860
North Korea-linked ScarCruft APT adds Bluetooth Harvester to its arsenalSecurity Affairs·May 14, 12:48 UTC · May 14, 2019Exploit / PoCCVE-2018-812060
Poisoned Windows shortcuts found to be a favorite of Chinese, Russian, N. Korean state hackersThe Record·Mar 18, 20:27 UTC · Mar 18, 2025Exploit / PoC in the wild60
NK-linked InkySquid APT leverages IE exploits in recent attacksSecurity Affairs·Aug 19, 06:51 UTC · Aug 19, 2021Exploit / PoC in the wildCVE-2020-1380CVE-2021-2641160
North Korean ScarCruft Exploits Windows ZeroThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Exploit / PoCCVE-2024-38178CVE-2020-1380CVE-2022-4112860
Google Warns of Internet Explorer Zero-Day Vulnerability Exploited by ScarCruft HackersThe Hacker News·Dec 9, 17:03 UTC · Dec 9, 2022Exploit / PoC in the wildCVE-2020-1380CVE-2021-26411CVE-2022-4112860
Microsoft seizes 50 websites used by North Korean hackers to gather intelligenceCyberScoop·Dec 31, 14:30 UTC · Dec 31, 2019Exploit / PoC in the wild60
Google '0Day In the Wild' project tracks zeroSecurity Affairs·May 16, 19:00 UTC · May 16, 2019Exploit / PoC60
Reaper Group’s Updated Mobile ArsenalPalo Alto Unit 42·Aug 16, 06:27 UTC · Aug 16, 2018Exploit / PoC45