Korean Archives - Ady DeeJay

North Korean Hackers Targets Job Seekers with Fake FreeConference App

September 4, 2024

by Ady DeeJay

Comments (0)

North Korean threat actors have leveraged a fake Windows video conferencing application impersonating FreeConference.com to backdoor developer systems as part of an ongoing financially-driven campaign dubbed Contagious Interview. The new attack wave, spotted by Singaporean company Group-IB in mid-August 2024, is yet another indication that the activity is also leveraging

February 26, 2024

by Ady DeeJay

Comments (0)

Feb 26, 2024The Hacker NewsSoftware Security / Cryptocurrency A set of fake npm packages discovered on the Node.js repository has been found to share ties with North Korean state-sponsored actors, new findings from Phylum show. The packages are named execution-time-async, data-time-utils, login-time-utils, mongodb-connection-utils, and mongodb-execution-utils. One of the packages in

February 20, 2024

by Ady DeeJay

Comments (0)

Feb 20, 2024NewsroomHacking / Cyber Espionage The North Korean state-sponsored threat actors have been attributed to a cyber espionage campaign targeting the defense sector across the world. In a joint advisory published by Germany’s Federal Office for the Protection of the Constitution (BfV) and South Korea’s National Intelligence Service (NIS),

August 23, 2023

by Ady DeeJay

Comments (0)

Aug 23, 2023THNCryptocurrency / Cyber Attack The U.S. Federal Bureau of Investigation (FBI) on Tuesday warned that threat actors affiliated with North Korea may attempt to cash out stolen cryptocurrency worth more than $40 million. The law enforcement agency attributed the blockchain activity to an adversary the U.S. government tracks

August 5, 2023

by Ady DeeJay

Comments (0)

Aug 05, 2023THNLinux / Malware Threat actors are using an open-source rootkit called Reptile to target Linux systems in South Korea. “Unlike other rootkit malware that typically only provide concealment capabilities, Reptile goes a step further by offering a reverse shell, allowing threat actors to easily take control of systems,”

June 1, 2023

by Ady DeeJay

Comments (0)

Jun 01, 2023Ravie LakshmananCyber Threat / Malware Cybersecurity researchers have offered a closer look at the RokRAT remote access trojan that’s employed by the North Korean state-sponsored actor known as ScarCruft. “RokRAT is a sophisticated remote access trojan (RAT) that has been observed as a critical component within the attack

May 24, 2023

by Ady DeeJay

Comments (0)

May 24, 2023Ravie LakshmananCyber Espionage / Server Security The infamous Lazarus Group actor has been targeting vulnerable versions of Microsoft Internet Information Services (IIS) servers as an initial breach route to deploy malware on targeted systems. The findings come from the AhnLab Security Emergency response Center (ASEC), which detailed the

May 15, 2023

by Ady DeeJay

Comments (0)

May 15, 2023Ravie LakshmananEndpoint Security / Ransomware A new ransomware group known as RA Group has become the latest threat actor to leverage the leaked Babuk ransomware source code to spawn its own locker variant. The cybercriminal gang, which is said to have been operating since at least April 22,

May 5, 2023

by Ady DeeJay

Comments (0)

May 05, 2023Ravie LakshmananCyber Threat / Malware The North Korean state-sponsored threat actor known as Kimsuky has been discovered using a new reconnaissance tool called ReconShark as part of an ongoing global campaign. “[ReconShark] is actively delivered to specifically targeted individuals through spear-phishing emails, OneDrive links leading to document downloads,

April 28, 2023

by Ady DeeJay

Comments (0)

Apr 28, 2023Ravie LakshmananMalware / Cyber Threat South Korean education, construction, diplomatic, and political institutions are at the receiving end of new attacks perpetrated by a China-aligned threat actor known as the Tonto Team. “Recent cases have revealed that the group is using a file related to anti-malware products to

North Korean Hackers Targets Job Seekers with Fake FreeConference App

North Korean Hackers Targeting Developers with Malicious npm Packages

New Report Reveals North Korean Hackers Targeting Defense Firms Worldwide

North Korean Affiliates Suspected in $40M Cryptocurrency Heist, FBI Warns

Advanced Linux Malware Targeting South Korean Systems

N. Korean ScarCruft Hackers Exploit LNK Files to Spread RokRAT

N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions

Recent Posts

Recent Comments

Categories

Archives

Recent Posts

Recent Comments

Categories

Archives

Tags