North Korea - Security Ticks

North Korean Hackers Targeted Hundreds in Fake Job Interview Attacks

Contagious Interview, Cryptocurrency, jobs, Nation-State, North Korea / SecurityTicks

North Korean Hackers Targeted Hundreds in Fake Job Interview Attacks 2025-09-05 at 14:04 By Ionut Arghire The hackers were seen actively monitoring cyber threat intelligence to discover and rebuild exposed infrastructure. The post North Korean Hackers Targeted Hundreds in Fake Job Interview Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

React to this headline:

North Korean Hackers Targeted Hundreds in Fake Job Interview Attacks Read More »

How 31 North Korean ‘developers’ fooled top crypto companies and stole $680K

North Korea / SecurityTicks

How 31 North Korean ‘developers’ fooled top crypto companies and stole $680K 2025-09-02 at 20:13 By Cointelegraph by Bradley Peak Learn how a North Korean group used 31 fake identities to infiltrate crypto firms and steal $680,000 from Favrr. Inside their tools, tactics and deception. This article is an excerpt from Cointelegraph.com News View Original

React to this headline:

How 31 North Korean ‘developers’ fooled top crypto companies and stole $680K Read More »

US Sanctions Russian National, Chinese Firm Aiding North Korean IT Workers

Fraud & Identity Theft, North Korea / SecurityTicks

US Sanctions Russian National, Chinese Firm Aiding North Korean IT Workers 2025-08-29 at 16:25 By Ionut Arghire US Treasury sanctions Russian and Chinese entities tied to North Korea’s use of fake IT workers, who exploited stolen identities, AI, and malware to funnel millions back to Pyongyang. The post US Sanctions Russian National, Chinese Firm Aiding

React to this headline:

US Sanctions Russian National, Chinese Firm Aiding North Korean IT Workers Read More »

Agentic AI coding assistant helped attacker breach, extort 17 distinct organizations

Anthropic, APT, Artificial Intelligence, cybercriminals, data theft, Don't miss, ESET, extortion, Hot stuff, LLMs, News, North Korea / SecurityTicks

Agentic AI coding assistant helped attacker breach, extort 17 distinct organizations 2025-08-28 at 15:29 By Zeljka Zorz Cybercriminals have started “vibe hacking” with AI’s help, AI startup Anthropic has shared in a report released on Wednesday. An attacker used the agentic AI coding assistant Claude Code for nearly all steps of a data extortion operation

React to this headline:

Agentic AI coding assistant helped attacker breach, extort 17 distinct organizations Read More »

US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam

fake IT workers, North Korea, reward, sentenced, Tracking & Law Enforcement / SecurityTicks

US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam 2025-07-25 at 11:06 By Ionut Arghire Christina Chapman was sentenced to prison for helping North Korean IT workers infiltrate US companies and running a laptop farm for them. The post US Targets North Korea’s Illicit Funds: $15M Rewards

React to this headline:

US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam Read More »

North Korean Hackers Use Fake Zoom Updates to Install macOS Malware

Featured, macOS, Malware, Malware & Threats, North Korea / SecurityTicks

North Korean Hackers Use Fake Zoom Updates to Install macOS Malware 2025-07-03 at 13:32 By Ionut Arghire SentinelOne says the fake Zoom update scam delivers ‘NimDoor’, a rare Nim-compiled backdoor. The post North Korean Hackers Use Fake Zoom Updates to Install macOS Malware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

North Korean Hackers Use Fake Zoom Updates to Install macOS Malware Read More »

US Storms 29 Laptop Farms in Crackdown on North Korean IT Worker Schemes

DOJ, fake IT workers, laptop farm, North Korea, Tracking & Law Enforcement / SecurityTicks

US Storms 29 Laptop Farms in Crackdown on North Korean IT Worker Schemes 2025-07-01 at 11:35 By Ionut Arghire The US has made 29 searches of known or suspected laptop farms supporting North Korean individuals posing as US IT workers. The post US Storms 29 Laptop Farms in Crackdown on North Korean IT Worker Schemes

React to this headline:

US Storms 29 Laptop Farms in Crackdown on North Korean IT Worker Schemes Read More »

North Korean Hackers Take Over Victims’ Systems Using Zoom Meeting

BlueNoroff, Cryptocurrency, cybercrime, DPRK, Malware & Threats, Nation-State, North Korea, Zoom, Zoom Meeting / SecurityTicks

North Korean Hackers Take Over Victims’ Systems Using Zoom Meeting 2025-06-23 at 19:45 By Ionut Arghire North Korean hackers employ social engineering to trick Zoom Meeting participants into executing system-takeover commands. The post North Korean Hackers Take Over Victims’ Systems Using Zoom Meeting appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

North Korean Hackers Take Over Victims’ Systems Using Zoom Meeting Read More »

US Seeks Forfeiture of $7.74M in Cryptocurrency Tied to North Korean IT Workers

Cryptocurrency, fake IT workers, North Korea, seized, Tracking & Law Enforcement / SecurityTicks

US Seeks Forfeiture of $7.74M in Cryptocurrency Tied to North Korean IT Workers 2025-06-09 at 13:46 By Ionut Arghire The US is seeking the forfeiture of $7.74 million in cryptocurrency in frozen wallets tied to North Korean fake IT workers schemes. The post US Seeks Forfeiture of $7.74M in Cryptocurrency Tied to North Korean IT

React to this headline:

US Seeks Forfeiture of $7.74M in Cryptocurrency Tied to North Korean IT Workers Read More »

How well do you know your remote IT worker?

cybersecurity, Don't miss, Hot stuff, Insider Threat, News, North Korea, remote working, threat, tips / SecurityTicks

How well do you know your remote IT worker? 2025-05-27 at 08:06 By Sinisa Markovic Is the remote IT worker you recently hired really who he says he is? Fake IT workers are slipping into companies around the world, gaining access to sensitive data. Recently, more of these schemes have been linked to North Korea.

React to this headline:

How well do you know your remote IT worker? Read More »

Nation-state APTs ramp up attacks on Ukraine and the EU

China, cyber espionage, cybersecurity, ESET, EU, News, North Korea, report, Russian Federation, survey, Ukraine / SecurityTicks

Nation-state APTs ramp up attacks on Ukraine and the EU 2025-05-21 at 07:02 By Help Net Security Russian APT groups intensified attacks against Ukraine and the EU, exploiting zero-day vulnerabilities and deploying wipers, according to ESET. Ukraine faces rising cyber threats The Russia-aligned Sandworm group intensified destructive operations against Ukrainian energy companies, deploying a new

React to this headline:

Nation-state APTs ramp up attacks on Ukraine and the EU Read More »

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers

China, cyberespionage, fake IT workers, Incident Response, North Korea, SentinelOne / SecurityTicks

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers 2025-05-01 at 11:32 By Eduard Kovacs SentinelOne has shared some information on the types of threat actors that have targeted the security firm recently. The post SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers appeared first on SecurityWeek. This article is

React to this headline:

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers Read More »

M-Trends 2025: State-Sponsored IT Workers Emerge as Global Threat

Mandiant, North Korea, report, Uncategorized / SecurityTicks

M-Trends 2025: State-Sponsored IT Workers Emerge as Global Threat 2025-04-25 at 16:32 By Kevin Townsend Mandiant’s latest threat report shows how attackers adapt faster than defenses, shifting strategies toward credential theft and insider threats. The post M-Trends 2025: State-Sponsored IT Workers Emerge as Global Threat appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

M-Trends 2025: State-Sponsored IT Workers Emerge as Global Threat Read More »

South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days

Lazarus, Nation-State, North Korea, South Korea, watering hole, Zero-Day / SecurityTicks

South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days 2025-04-25 at 14:31 By Ionut Arghire Multiple South Korean organizations across industries have been targeted in a recent Lazarus campaign dubbed Operation SyncHole. The post South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days appeared first on SecurityWeek. This article is an

React to this headline:

South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days Read More »

North Korean Cryptocurrency Thieves Caught Hijacking Zoom ‘Remote Control’ Feature

Bybit, Cryptocurrency, Fraud & Identity Theft, Lazarus, Malware & Threats, North Korea, social engineering, Zoom / SecurityTicks

North Korean Cryptocurrency Thieves Caught Hijacking Zoom ‘Remote Control’ Feature 2025-04-21 at 19:02 By Ryan Naraine North Korean cryptocurrency thieves abusing Zoom Remote collaboration feature to target cryptocurrency traders with malware. The post North Korean Cryptocurrency Thieves Caught Hijacking Zoom ‘Remote Control’ Feature appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

North Korean Cryptocurrency Thieves Caught Hijacking Zoom ‘Remote Control’ Feature Read More »

North Korea’s IT Operatives Are Exploiting Remote Work Globally

cybercrime, Nation-State, North Korea / SecurityTicks

North Korea’s IT Operatives Are Exploiting Remote Work Globally 2025-04-02 at 16:32 By Kevin Townsend The global rise of North Korean IT worker infiltration poses a serious cybersecurity risk—using fake identities, remote access, and extortion to compromise organizations. The post North Korea’s IT Operatives Are Exploiting Remote Work Globally appeared first on SecurityWeek. This article

React to this headline:

North Korea’s IT Operatives Are Exploiting Remote Work Globally Read More »

Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks

ClickFix, Cryptocurrency, Nation-State, North Korea / SecurityTicks

Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks 2025-04-02 at 13:50 By Ionut Arghire North Korea’s Lazarus hackers are using the ClickFix technique for malware deployment in fresh attacks targeting the cryptocurrency ecosystem. The post Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Lazarus Uses ClickFix Tactics in Fake Cryptocurrency Job Attacks Read More »

North Korean IT workers set their sights on European organizations

blockchain, CMS, data theft, Don't miss, EU, extortion, Hot stuff, Insider Threat, News, North Korea, UK, web application, web development / SecurityTicks

North Korean IT workers set their sights on European organizations 2025-04-02 at 13:05 By Zeljka Zorz North Korean IT workers are expanding their efforts beyond the US, and are seeking to fraudulently gain employment with organizations around the world, but most especially in Europe. According to Google’s threat researchers, they are also increasingly attempting to

React to this headline:

North Korean IT workers set their sights on European organizations Read More »

North Korean Hackers Distributed Android Spyware via Google Play

APT, KoSpy, North Korea, ScarCruft, spyware, Uncategorized / SecurityTicks

North Korean Hackers Distributed Android Spyware via Google Play 2025-03-13 at 15:01 By Eduard Kovacs The North Korea-linked APT37 has been observed targeting Android users with spyware distributed via Google Play. The post North Korean Hackers Distributed Android Spyware via Google Play appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

North Korean Hackers Distributed Android Spyware via Google Play Read More »

How Social Engineering Sparked a Billion-Dollar Supply Chain Cryptocurrency Heist

Bybit, Cryptocurrency, Ethereum, Lazarus, Malware & Threats, Nation-State, North Korea, SafeWallet / SecurityTicks

How Social Engineering Sparked a Billion-Dollar Supply Chain Cryptocurrency Heist 2025-03-07 at 01:09 By Ryan Naraine The $1.4 billion ByBit cryptocurrency heist combined social engineering, stolen AWS session tokens, MFA bypasses and a rigged JavaScript file. The post How Social Engineering Sparked a Billion-Dollar Supply Chain Cryptocurrency Heist appeared first on SecurityWeek. This article is

React to this headline:

How Social Engineering Sparked a Billion-Dollar Supply Chain Cryptocurrency Heist Read More »