Operation Conflict Compass Deploys VelvetCake PowerShell Malware Through Malicious LNK Files
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Contagious Interview: 30,000 devices infected by a fake job interview
Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries
2 sources 7 min
Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties
in the wild 15 min
North Korea's fake job interviews infected 30,000 devices
in the wild 3 min
Nations take action on North Korean IT workers after UN report
5 min
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
in the wild 3 min1
North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters
2 min
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
in the wild 15 min1
Researching Employment Scams
1
North Korea-linked IT Workers Are Getting Hired Inside Western Companies
in the wild 5 min
North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
in the wild 8 min
North Korean remote workers are broadening their job hunt beyond IT
in the wild 4 min
Red Flags That Expose Fake North Korean IT Workers
Insights into Suspected DPRK Workers
in the wild
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
in the wild1
North Korean IT Workers Scheme: Detection IOCs and Tactics for Government and Corporate SOCs
PurpleDelta's Fraudulent Employment Operations
North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring
in the wild 6 min
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
4 min