North Korea

North Korean Hackers Target High-Profile Node.js Maintainers

Node.js, North Korea, supply chain attack, Supply Chain Security /

North Korean Hackers Target High-Profile Node.js Maintainers 2026-04-06 at 14:12 By Ionut Arghire The threat actor behind the Axios supply chain attack has been aiming at other maintainers in its social engineering campaign. The post North Korean Hackers Target High-Profile Node.js Maintainers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

North Korean Hackers Target High-Profile Node.js Maintainers Read More »

North Korean Hackers Drain $285 Million From Drift in 10 Seconds

Cryptocurrency, cryptocurrency heist, cybercrime, drift, Featured, North Korea /

North Korean Hackers Drain $285 Million From Drift in 10 Seconds 2026-04-03 at 14:30 By Ionut Arghire The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults. The post North Korean Hackers Drain $285 Million From Drift in 10 Seconds appeared first on SecurityWeek. This article is an […]

North Korean Hackers Drain $285 Million From Drift in 10 Seconds Read More »

North Korean hackers linked to Axios npm supply chain compromise

Arctic Wolf Networks, backdoor, cybercrime, Don't miss, Google Cloud, Hot stuff, Mandiant, News, North Korea, supply chain attacks, supply chain compromise /

North Korean hackers linked to Axios npm supply chain compromise 2026-04-01 at 18:56 By Zeljka Zorz The software supply chain attack that resulted in the compromise of npm packages of Axios, an extremely popular HTTP client library, is believed to be the work of financially-motivated North Korean attackers. Links to UNC1069 On March 31, 2026, […]

North Korean hackers linked to Axios npm supply chain compromise Read More »

Axios NPM Package Breached in North Korean Supply Chain Attack

Application Security, Axios, Featured, North Korea, NPM, supply chain attack, Supply Chain Security /

Axios NPM Package Breached in North Korean Supply Chain Attack 2026-04-01 at 11:46 By Ionut Arghire A long-lived NPM access token was used to bypass the GitHub Actions OIDC-based CI/CD publishing workflow and push backdoored package versions. The post Axios NPM Package Breached in North Korean Supply Chain Attack appeared first on SecurityWeek. This article […]

Axios NPM Package Breached in North Korean Supply Chain Attack Read More »

Elite members of North Korean society fake their way into Western paychecks

cyber espionage, cybercrime, Flare, IBM X-Force, News, North Korea, remote working /

Elite members of North Korean society fake their way into Western paychecks 2026-03-19 at 09:02 By Sinisa Markovic Increased federal activity, including indictments over the past year, has drawn attention to a pattern that has been unfolding inside corporate hiring pipelines. North Korean nationals are securing roles as remote IT contractors and full-time staff within […]

Elite members of North Korean society fake their way into Western paychecks Read More »

Polyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea

cybercrime, infostealer, Malware, Malware & Threats, North Korea, Polyfill /

Polyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea 2026-03-12 at 11:48 By Eduard Kovacs The 2024 incident was initially linked to China, but an infostealer infection has now revealed North Korean involvement. The post Polyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea appeared first on SecurityWeek. This article is […]

Polyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea Read More »

North Korean APT Targets Air-Gapped Systems in Recent Campaign

air gap, APT37, Malware & Threats, North Korea /

North Korean APT Targets Air-Gapped Systems in Recent Campaign 2026-03-02 at 13:47 By Ionut Arghire Using Windows shortcut files, the APT deployed a new implant, a loader, a propagation tool, and two backdoors. The post North Korean APT Targets Air-Gapped Systems in Recent Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

North Korean APT Targets Air-Gapped Systems in Recent Campaign Read More »

Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud

cybercrime, fake IT workers, laptop farm, North Korea, sentenced, Ukraine /

Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud 2026-02-23 at 15:38 By Ionut Arghire Oleksandr Didenko sold the stolen identities of US citizens, allowing North Koreans to get hired using freelance work platforms. The post Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud appeared first […]

Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud Read More »

North Korean Hackers Target macOS Developers via Malicious VS Code Projects

macOS malware, Malware, Malware & Threats, North Korea, VS Code /

North Korean Hackers Target macOS Developers via Malicious VS Code Projects 2026-01-21 at 15:23 By Ionut Arghire The hackers trick victims into accessing GitHub or GitLab repositories that are opened using Visual Studio Code. The post North Korean Hackers Target macOS Developers via Malicious VS Code Projects appeared first on SecurityWeek. This article is an […]

North Korean Hackers Target macOS Developers via Malicious VS Code Projects Read More »

FBI: North Korean Spear-Phishing Attacks Use Malicious QR Codes

FBI, Kimsuky, Malware & Threats, North Korea, QR code, quishing, spear-phishing /

FBI: North Korean Spear-Phishing Attacks Use Malicious QR Codes 2026-01-09 at 17:34 By Ionut Arghire The North Korean state-sponsored espionage group Kimsuky has targeted government organizations, think tanks, and academic institutions. The post FBI: North Korean Spear-Phishing Attacks Use Malicious QR Codes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

FBI: North Korean Spear-Phishing Attacks Use Malicious QR Codes Read More »

North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers

Amazon, cryptocurrency heist, fake IT workers, Nation-State, North Korea, report /

North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers 2025-12-19 at 12:14 By Eduard Kovacs Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers. The post North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 […]

North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers Read More »

Crypto theft in 2025: North Korean hackers continue to dominate

Chainalysis, Cryptocurrency, Don't miss, Hot stuff, Insider Threat, News, North Korea, social engineering, theft /

Crypto theft in 2025: North Korean hackers continue to dominate 2025-12-18 at 17:42 By Zeljka Zorz When they strike cryptocurrency-related targets, North Korean hacking groups are increasingly aiming for large services where a single breach can move serious money, a new Chainalysis report on crypto theft in 2025 revealed. “North Korean hackers stole $2.02 billion […]

Crypto theft in 2025: North Korean hackers continue to dominate Read More »

React2Shell Attacks Linked to North Korean Hackers

EtherRAT, Malware & Threats, North Korea, React2Shell /

React2Shell Attacks Linked to North Korean Hackers 2025-12-09 at 17:40 By Eduard Kovacs North Korean threat actors are believed to be behind CVE-2025-55182 exploitation delivering EtherRAT. The post React2Shell Attacks Linked to North Korean Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React2Shell Attacks Linked to North Korean Hackers Read More »

Five men admit helping North Korean IT workers infiltrate US companies

Cryptocurrency, Don't miss, fraud, Hot stuff, News, North Korea, theft, US DoJ /

Five men admit helping North Korean IT workers infiltrate US companies 2025-11-17 at 14:59 By Zeljka Zorz US federal prosecutors have secured guilty pleas from five men who helped North Korean IT workers get hired by companies in the United States. This group of domestic facilitators helped a sanctioned government move money, slip past hiring […]

Five men admit helping North Korean IT workers infiltrate US companies Read More »

5 Plead Guilty in US to Helping North Korean IT Workers

cybercrime, fake IT workers, North Korea, plead guilty /

5 Plead Guilty in US to Helping North Korean IT Workers 2025-11-17 at 14:42 By Eduard Kovacs Audricus Phagnasay, Jason Salazar, Alexander Paul Travis, Erick Ntekereze, and Oleksandr Didenko have pleaded guilty. The post 5 Plead Guilty in US to Helping North Korean IT Workers appeared first on SecurityWeek. This article is an excerpt from […]

5 Plead Guilty in US to Helping North Korean IT Workers Read More »

Russia-linked hackers intensify attacks as global APT activity shifts

APT, China, cybercrime, Don't miss, ESET, EU, Europe, News, North Korea, report, Russian Federation /

Russia-linked hackers intensify attacks as global APT activity shifts 2025-11-06 at 14:50 By Anamarija Pogorelec State-aligned hacking groups have spent the past six months ramping up espionage, sabotage, and cybercrime campaigns across multiple regions, according to ESET’s APT Activity Report covering April through September 2025. The research highlights how operations linked to Russia, China, Iran, […]

Russia-linked hackers intensify attacks as global APT activity shifts Read More »

US Sanctions North Korean Bankers Accused of Laundering Stolen Cryptocurrency

cybercrime, North Korea, Sanctions /

US Sanctions North Korean Bankers Accused of Laundering Stolen Cryptocurrency 2025-11-05 at 12:11 By Associated Press The United States on Tuesday imposed sanctions on a group of bankers, financial institutions and others accused of laundering money from cyber crime schemes — money the Treasury Department says helps pay for North Korea’s nuclear weapons program. Over […]

US Sanctions North Korean Bankers Accused of Laundering Stolen Cryptocurrency Read More »

Sanctions won’t stop cyberattacks, but they can still “bite”

China, Don't miss, EU, government-backed attacks, Hot stuff, News, North Korea, RUSI, Russian Federation, Sanctions, tips, UK, USA /

Sanctions won’t stop cyberattacks, but they can still “bite” 2025-10-29 at 16:58 By Zeljka Zorz Sanctions are one of the tools Western governments use when they want to hit back at state-sponsored cyber threat actors. But do they actually work? That’s the question a group of current and former cybersecurity officials, analysts, and researchers tackled […]

Sanctions won’t stop cyberattacks, but they can still “bite” Read More »

North Korean Hackers Aim at European Drone Companies

drones, Europe, Lazarus, Nation-State, North Korea /

North Korean Hackers Aim at European Drone Companies 2025-10-24 at 17:56 By Ionut Arghire Lazarus has used fake job offers in attacks targeting companies developing UAV technology, for information theft. The post North Korean Hackers Aim at European Drone Companies appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

North Korean Hackers Aim at European Drone Companies Read More »

How Lazarus Group used fake job ads to spy on Europe’s drone and defense sector

cybercrime, cybersecurity, Don't miss, ESET, Malware, News, North Korea, Remote Access Trojan, scams, threats, trojan /

How Lazarus Group used fake job ads to spy on Europe’s drone and defense sector 2025-10-23 at 09:23 By Sinisa Markovic ESET researchers have uncovered a fresh wave of Operation DreamJob, a long-running campaign linked to North Korea’s Lazarus Group. This latest activity targeted several European defense contractors, including firms deeply involved in drone and […]

How Lazarus Group used fake job ads to spy on Europe’s drone and defense sector Read More »

Scroll to Top