Malware Attack on South Korean Entities Was Work of Andariel GroupThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2021Malware55
Kaspersky crimeware report: Andariel’s mistakes and EasyRat malwareKaspersky Securelist·Jun 28, 14:56 UTC · Jun 28, 2023Malware in the wild60
Experts linked Maui ransomware to North Korean Andariel APTSecurity Affairs·Aug 9, 17:04 UTC · Aug 9, 2022Ransomware60
North Korean Hackers Target Critical Infrastructure for Military GainInfosecurity Magazine·Jul 26, 11:02 UTC · Jul 26, 2024Ransomware60
North Korea-linked Andariel APT Group exploited an ActiveX ZeroSecurity Affairs·Jun 1, 06:33 UTC · Jun 1, 2018Threat actor60
IT threat evolution Q2 2021Kaspersky Securelist·Aug 12, 10:12 UTC · Aug 12, 2021RansomwareCVE-2018-0802CVE-2021-1732CVE-2021-28310+2 CVEs60
US Sanctions 3 North Korean Hacking Groups Accused for Global Cyber AttacksThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2019Policy & legal55
⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025RansomwareCVE-2025-25257CVE-2025-25251CVE-2025-31365+36 CVEs160
North Korean hacking group makes waves to gain Mandiant, FBI spotlightCyberScoop·Jul 25, 10:00 UTC · Jul 25, 2024Ransomware in the wild60
North Korean hacking group targeted weapons blueprints, nuclear facilities in cyber campaignsThe Record·Jul 25, 01:25 UTC · Jul 25, 2024Threat actor60
Familiar North Korean groups cited in cyberattacks against South Korean defense firmsThe Record·Apr 23, 19:04 UTC · Apr 23, 2024Data breach60
Lazarus Group Using Log4j Exploits to Deploy Remote Access TrojansThe Hacker News·Dec 12, 04:59 UTC · Dec 12, 2023MalwareCVE-2021-44228CVE-2021-44832CVE-2023-4279360
Lazarus exploit Log4Shell vulnerability to deliver novel RAT malwareHelp Net Security·Dec 12, 00:00 UTC · Dec 12, 2023VulnerabilityCVE-2021-4422860
North Korean hacking ops continue to exploit Log4ShellCyberScoop·Dec 11, 13:00 UTC · Dec 11, 2023Ransomware in the wild60
Lazarus Group's infrastructure reuse leads to discovery of new malwareCisco Talos·Aug 24, 12:04 UTC · Aug 24, 2023MalwareCVE-2022-4796660
North Korea ransomware targets hospitals to fund digital spycraft, US agencies warnCyberScoop·Feb 9, 21:11 UTC · Feb 9, 2023Ransomware in the wild60
U.S. Offers $10 Million Reward for Information on North Korean HackersThe Hacker News·Jul 29, 02:58 UTC · Jul 29, 2022Ransomware60
Cyberthreats to financial organizations in 2022Kaspersky Securelist·Nov 23, 10:00 UTC · Nov 23, 2021RansomwareCVE-2019-5544CVE-2020-3992CVE-2018-13379+2 CVEs60
North Korean government hackers sanctioned by U.S. TreasuryCyberScoop·Sep 13, 18:14 UTC · Sep 13, 2019Policy & legal in the wild60
Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaignsHelp Net Security·Jun 19, 12:07 UTC · Jun 19, 2026Threat actor60
Hackers Used AI to Develop First Known ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2026Exploit / PoC160
Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber OperationsThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Ransomware60
⚡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and MoreThe Hacker News·Nov 10, 12:51 UTC · Nov 10, 2025MalwareCVE-2025-21042160
Treasury slaps sanctions on people, companies tied to North Korean IT worker schemesCyberScoop·Jul 8, 19:18 UTC · Jul 8, 2025Policy & legal in the wild60
Nation-state APTs ramp up attacks on Ukraine and the EUHelp Net Security·May 21, 00:00 UTC · May 21, 2025Threat actorCVE-2024-11182CVE-2024-9680CVE-2024-4903960
Russian APT Groups Intensify Attacks in Europe with ZeroInfosecurity Magazine·May 20, 15:15 UTC · May 20, 2025Threat actorCVE-2024-11182CVE-2024-9680CVE-2024-49039160
Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Flaws and ThreatNeedle MalwareThe Hacker News·Apr 29, 03:35 UTC · Apr 29, 2025Malware55
Lazarus APT updates its toolset in watering hole attacksKaspersky Securelist·Apr 24, 05:00 UTC · Apr 24, 2025Threat actor60
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28The Hacker News·Nov 5, 03:08 UTC · Nov 5, 2024RansomwareCVE-2024-50550CVE-2024-7474CVE-2024-7475+9 CVEs60
Week in review: Windows Themes spoofing bug "returns", employees phished via Microsoft TeamsHelp Net Security·Nov 3, 00:00 UTC · Nov 3, 2024Ransomware60
South Korea Warns Pyongyang Has Stolen Spy Plane DetailsInfosecurity Magazine·Aug 13, 10:30 UTC · Aug 13, 2024Threat actor60
North Korean Hackers Shift from Cyber Espionage to Ransomware AttacksThe Hacker News·Jul 26, 08:40 UTC · Jul 26, 2024Ransomware60
North Korean hacker used hospital ransomware attacks to fund espionageCyberScoop·Jul 25, 20:12 UTC · Jul 25, 2024Ransomware in the wild60
Chinese and N. Korean Hackers Target Global Infrastructure with RansomwareThe Hacker News·Jun 28, 04:02 UTC · Jun 28, 2024Ransomware60
Cybercriminals are getting faster at exploiting vulnerabilitiesHelp Net Security·May 10, 00:00 UTC · May 10, 2024Vulnerability55
North Korean Hackers Target Dozens of Defense CompaniesInfosecurity Magazine·Apr 24, 09:30 UTC · Apr 24, 2024Data breach60
North Korean hackers are targeting software developers and impersonating IT workersHelp Net Security·Oct 20, 00:00 UTC · Oct 20, 2023RansomwareCVE-2023-4279360
Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity FlawThe Hacker News·Oct 19, 07:15 UTC · Oct 19, 2023VulnerabilityCVE-2023-4279360