DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate CompaniesThe Hacker News·Feb 11, 14:43 UTC · Feb 11, 2026Malware42
New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATsThe Hacker News·Apr 30, 06:31 UTC · Apr 30, 2026Malware142
DPRK-Linked Hackers Use GitHub as C2 in MultiThe Hacker News·Apr 9, 04:56 UTC · Apr 9, 2026Malware142
North Korea-Linked Hackers Steal $2.02 Billion in 2025, Leading Global Crypto TheftThe Hacker News·Dec 18, 17:00 UTC · Dec 18, 2025Malware42
DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job ScamsThe Hacker News·Sep 22, 15:17 UTC · Sep 22, 2025Malware42
DPRK Hackers Exploit LinkedIn to Infect Developers with InfostealersInfosecurity Magazine·Apr 15, 15:15 UTC · Apr 15, 2025Malware42
A fourth bank hit by SWIFT hackers, are they backed by the DPRKSecurity Affairs·Nov 12, 14:59 UTC · Nov 12, 2017Malware42
North Korean hackers are skimming US and European shoppersSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware42
North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview LuresThe Hacker News·Apr 29, 03:35 UTC · Apr 29, 2025Malware42
U.S. Defense Warns of 3 New Malware Used by North Korean HackersThe Hacker News·Feb 12, 05:13 UTC · Feb 12, 2025Malware42
Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus MalwareThe Hacker News·Dec 27, 06:15 UTC · Dec 27, 2024Malware42
DMM Bitcoin $308M Bitcoin heist linked to North KoreaSecurity Affairs·Dec 25, 12:02 UTC · Dec 25, 2024Malware42
North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor MalwareThe Hacker News·Sep 19, 09:24 UTC · Sep 19, 2024Malware42
New macOS Malware TodoSwift Linked to North Korean Hacking GroupsThe Hacker News·Aug 22, 04:13 UTC · Aug 22, 2024Malware42
Russian Government Software Backdoored to Deploy Konni RAT MalwareThe Hacker News·Feb 24, 07:32 UTC · Feb 24, 2024Malware42
FBI identifies wallets holding cryptocurrency funds stolen by North KoreaSecurity Affairs·Aug 23, 17:40 UTC · Aug 23, 2023Malware42
North Korea-linked APT37 targets journalists with GOLDBACKDOORSecurity Affairs·Apr 26, 08:25 UTC · Apr 26, 2022Malware42
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag ImagesThe Hacker News·Jul 19, 18:14 UTC · Jul 19, 2026Malware42
macOS.Gaslight: North Korea-Linked Malware That Tries to Gaslight the AnalystSecurity Affairs·Jun 26, 07:18 UTC · Jun 26, 2026Malware42
New BeaverTail Malware Variant Linked to Lazarus GroupInfosecurity Magazine·Dec 18, 12:00 UTC · Dec 18, 2025Malware42
ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean AcademicsThe Hacker News·Sep 25, 12:56 UTC · Sep 25, 2025Malware42
BlueNoroff Deepfake Zoom Scam Hits Crypto Employee with macOS Backdoor MalwareThe Hacker News·Jul 7, 04:24 UTC · Jul 7, 2025Malware142
Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost MalwareThe Hacker News·Apr 3, 17:27 UTC · Apr 3, 2025Malware42
North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOSThe Hacker News·Nov 8, 04:08 UTC · Nov 8, 2024Malware42
BlueNoroff used macOS malware with novel persistenceSecurity Affairs·Nov 7, 16:16 UTC · Nov 7, 2024Malware42
BeaverTail Malware Resurfaces in Malicious npm Packages Targeting DevelopersThe Hacker News·Oct 28, 17:12 UTC · Oct 28, 2024Malware42
North Korean Hackers Update BeaverTail Malware to Target MacOS UsersThe Hacker News·Jul 20, 15:48 UTC · Jul 20, 2024Malware42
North Korean Hackers Targeting Crypto Experts with KANDYKORN macOS MalwareThe Hacker News·Nov 1, 14:38 UTC · Nov 1, 2023Malware42
North Korean Hackers Target Journalists with GOLDBACKDOOR MalwareThe Hacker News·Apr 26, 09:53 UTC · Apr 26, 2022Malware42
North Korea Funding Nuclear Program with Cyber ActivityInfosecurity Magazine·Apr 21, 16:30 UTC · Apr 21, 2022Malware42
North Korean attackers use malicious blogs to deliver malware to highCisco Talos·Nov 10, 22:11 UTC · Nov 10, 2021Malware42
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from BlockchainThe Hacker News·Aug 6, 10:08 UTC · Aug 6, 2026Malware42
AWS Blames North Korean Group for npm Supply Chain AttacksInfosecurity Magazine·Jul 31, 09:50 UTC · Jul 31, 2026Malware42
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire SleetThe Hacker News·Jul 30, 07:58 UTC · Jul 30, 2026Malware42
N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, RustThe Hacker News·Apr 8, 07:47 UTC · Apr 8, 2026Malware142
North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie MalwareThe Hacker News·Nov 28, 16:18 UTC · Nov 28, 2025Malware42
New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South KoreaThe Hacker News·Nov 3, 10:42 UTC · Nov 3, 2025Malware42
North Korean Hackers Stole Millions from Cryptocurrency Startups WorldwideThe Hacker News·Oct 28, 15:53 UTC · Oct 28, 2025Malware42