#северная-корея
-
Researchers set up a fake start-up to study North Korean IT job fraudsters
To understand how North Korean IT workers obtain jobs under false pretences, researchers founded a start-up company that does not really exist.
-
Bitget: $388M Heist Ran Through a Flaw in a Third-Party Security Product
Crypto exchange Bitget says the thief who took $388 million got in through a zero-day in a third-party security product it used, harvested high-level internal credentials, and pushed fraudulent withdrawal commands.
-
Bitget crypto exchange hacked: $351.6 million stolen
Crypto exchange Bitget says attackers drained $351.6 million from its hot and warm wallets. Suspected North Korean hackers are behind the breach.
-
North Korea's Jade Sleet Hits Indian IT Provider With FLATROOF and ROOFDECK Backdoors
SentinelOne has linked the Jade Sleet group to a breach of a small Indian IT firm using macOS backdoors already seen in the KelpDAO bridge attack. The case again shows that developers remain North Korea's favourite way in.
-
Lazarus Exploited a Windows 0-Day to Attack Defense Firms
The North Korean group Lazarus exploited a zero-day vulnerability in AFD.sys for privilege escalation as part of the Operation Dream Job campaign, targeting the defense sector in Europe, India and Latin America.
-
North Korean hackers hide malware in SVG flags of fake coding tests
Attackers tied to the Contagious Interview campaign are using steganography in SVG images to conceal a malicious payload inside fake assignments for job seekers. The victims are developers who respond to bogus job openings.