North Korea - Security Ticks

Moonstone Sleet: A new North Korean threat actor

cyber espionage, data theft, Don't miss, Hot stuff, Microsoft, News, North Korea, Ransomware / SecurityTicks

Moonstone Sleet: A new North Korean threat actor 2024-05-29 at 15:46 By Zeljka Zorz Microsoft has named yet another state-aligned threat actor: Moonstone Sleet (formerly Storm-1789), which engages in cyberespionage and ransomware attacks to further goals of the North Korean regime. “Moonstone Sleet uses tactics, techniques, and procedures (TTPs) also used by other North Korean […]

React to this headline:

Moonstone Sleet: A new North Korean threat actor Read More »

New North Korean Threat Actor Engaging in Espionage, Revenue Generation Attacks

Nation-State, North Korea / SecurityTicks

New North Korean Threat Actor Engaging in Espionage, Revenue Generation Attacks 2024-05-29 at 15:16 By Ionut Arghire Microsoft dives into the tactics, techniques, and procedures of North Korean threat actor Moonstone Sleet. The post New North Korean Threat Actor Engaging in Espionage, Revenue Generation Attacks appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

New North Korean Threat Actor Engaging in Espionage, Revenue Generation Attacks Read More »

US exposes scheme enabling North Korean IT workers to bypass sanctions

DOJ, Don't miss, enterprise, Hot stuff, News, North Korea, tips, USA / SecurityTicks

US exposes scheme enabling North Korean IT workers to bypass sanctions 2024-05-17 at 14:46 By Zeljka Zorz The US Justice Department had unsealed charges against a US woman and an Ukranian man who, along with three unidentified foreign nationals, have allegedly helped North Korean IT workers work remotely for US companies under assumed US identities

React to this headline:

US exposes scheme enabling North Korean IT workers to bypass sanctions Read More »

Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms

arrested, charged, North Korea, Tracking & Law Enforcement / SecurityTicks

Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms 2024-05-17 at 13:01 By Eduard Kovacs The US government has announced charges, seizures, arrests and rewards as part of an effort to disrupt a scheme that generates revenue for North Korea. The post Woman Accused of Helping North Korean IT Workers Infiltrate

React to this headline:

Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms Read More »

North Korea used Tornado Cash to siphon HTX’s $147.5M loot: UN

Alexey Pertsev, crypto mixing services, cryptocurrency laundering, cryptocurrency thefts, cyberattacks, lazarus group, money laundering, North Korea, privacy protocol, Tornado Cash, UN report / SecurityTicks

North Korea used Tornado Cash to siphon HTX’s $147.5M loot: UN 2024-05-15 at 16:01 By Cointelegraph by Arijit Sarkar A UN report reveals North Korean hackers laundered $150 million in stolen crypto assets through Tornado Cash in March 2024. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

North Korea used Tornado Cash to siphon HTX’s $147.5M loot: UN Read More »

US Says North Korean Hackers Exploiting Weak DMARC Settings

APT, DMARC, email security, Featured, Kimsuky, Malware & Threats, Nation-State, North Korea / SecurityTicks

US Says North Korean Hackers Exploiting Weak DMARC Settings 2024-05-03 at 19:16 By Ionut Arghire The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks. The post US Says North Korean Hackers Exploiting Weak DMARC Settings appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

US Says North Korean Hackers Exploiting Weak DMARC Settings Read More »

North Korean Lazarus Group laundered over $200M in hacked crypto since 2020

hackers, Hacks, North Korea / SecurityTicks

North Korean Lazarus Group laundered over $200M in hacked crypto since 2020 2024-04-29 at 18:01 By Cointelegraph by Zoltan Vardai The notorious group of hackers used a combination of crypto mixers and peer-to-peer marketplaces to launder the stolen funds. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

North Korean Lazarus Group laundered over $200M in hacked crypto since 2020 Read More »

North Korean Hackers Hijack Antivirus Updates for Malware Delivery

Malware, Malware & Threats, North Korea / SecurityTicks

North Korean Hackers Hijack Antivirus Updates for Malware Delivery 2024-04-24 at 18:17 By Ionut Arghire A North Korea-linked threat actor hijacked the update mechanism of eScan antivirus to deploy backdoors and cryptocurrency miners. The post North Korean Hackers Hijack Antivirus Updates for Malware Delivery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

North Korean Hackers Hijack Antivirus Updates for Malware Delivery Read More »

North Korean Lazarus hacker group using LinkedIn to target and steal assets: Report

hackers, North Korea / SecurityTicks

North Korean Lazarus hacker group using LinkedIn to target and steal assets: Report 2024-04-24 at 14:01 By Cointelegraph by Prashant Jha Lazarus group first surfaced in 2009, and since then, it has primarily targeted crypto firms, stealing billions of dollars worth of assets. This article is an excerpt from Cointelegraph.com News View Original Source React

React to this headline:

North Korean Lazarus hacker group using LinkedIn to target and steal assets: Report Read More »

Former Ethereum dev Virgil Griffith asks for resentencing in North Korea case

court, lawyers, North Korea, Sanctions, sentence, Virgil Griffith / SecurityTicks

Former Ethereum dev Virgil Griffith asks for resentencing in North Korea case 2024-04-18 at 07:02 By Cointelegraph by Martin Young Griffith’s attorneys are asking for a sentence reduction from 63 months to 51 months or less. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Former Ethereum dev Virgil Griffith asks for resentencing in North Korea case Read More »

Railgun denies being used by North Korea as it nears $1B total volume

crypto mixer, North Korea, Privacy, Railgun / SecurityTicks

Railgun denies being used by North Korea as it nears $1B total volume 2024-04-17 at 05:01 By Cointelegraph by Felix Ng Privacy protocol Railgun, which security analysts have labeled a “prime alternative” to Tornado Cash, denied U.S.-sanctioned entities are using it. This article is an excerpt from Cointelegraph.com News View Original Source React to this

React to this headline:

Railgun denies being used by North Korea as it nears $1B total volume Read More »

Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack

CVE-2024-21338, exploited, Featured, Lazarus, Malware & Threats, North Korea, Vulnerabilities, Windows, Zero-Day / SecurityTicks

Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack 2024-02-29 at 13:46 By Eduard Kovacs North Korean group Lazarus exploited AppLocker driver zero-day CVE-2024-21338 for privilege escalation in attacks involving FudModule rootkit. The post Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack Read More »

South Korea Says Presumed North Korean Hackers Breached Personal Emails of Presidential Staffer

Cyberwarfare, North Korea, South Korea / SecurityTicks

South Korea Says Presumed North Korean Hackers Breached Personal Emails of Presidential Staffer 2024-02-14 at 18:46 By Associated Press South Korean President Yoon Suk Yeol’s office said presumed North Korean hackers breached the personal emails of one of his staff members. The post South Korea Says Presumed North Korean Hackers Breached Personal Emails of Presidential

React to this headline:

South Korea Says Presumed North Korean Hackers Breached Personal Emails of Presidential Staffer Read More »

New ‘SpectralBlur’ macOS Backdoor Linked to North Korea

Mac malware, Malware & Threats, North Korea / SecurityTicks

New ‘SpectralBlur’ macOS Backdoor Linked to North Korea 2024-01-05 at 15:45 By Ionut Arghire SpectralBlur is a new macOS backdoor that shows similarities with North Korean hacking group’s KandyKorn malware. The post New ‘SpectralBlur’ macOS Backdoor Linked to North Korea appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

New ‘SpectralBlur’ macOS Backdoor Linked to North Korea Read More »

Lazarus exploit Log4Shell vulnerability to deliver novel RAT malware

Cisco, Don't miss, exploit, Hot stuff, Log4j, Malware, News, North Korea, vulnerability / SecurityTicks

Lazarus exploit Log4Shell vulnerability to deliver novel RAT malware 12/12/2023 at 17:50 By Helga Labus North Korea-backed group Lazarus has been spotted exploiting the Log4Shell vulnerability (CVE-2021-44228) and novel malware written in DLang (i.e., the memory-safe D programming language). “This campaign consists of continued opportunistic targeting of enterprises globally that publicly host and expose their

React to this headline:

Lazarus exploit Log4Shell vulnerability to deliver novel RAT malware Read More »

North Korean Hackers Developing Malware in Dlang Programming Language

Lazarus, Malware, Malware & Threats, North Korea / SecurityTicks

North Korean Hackers Developing Malware in Dlang Programming Language 11/12/2023 at 18:16 By Ionut Arghire North Korean hackers have used Dlang-based malware in attacks against manufacturing, agriculture, and physical security organizations. The post North Korean Hackers Developing Malware in Dlang Programming Language appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

North Korean Hackers Developing Malware in Dlang Programming Language Read More »

North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report

Cryptocurrency, cybercrime, Data Breaches, Kimsuky, Lazarus, Nation-State, North Korea, Threat Intelligence / SecurityTicks

North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report 04/12/2023 at 18:16 By Ionut Arghire Recorded Future calculates that North Korean state-sponsored threat actors are believed to have stolen more than $3 billion in cryptocurrency. The post North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report appeared first on SecurityWeek. This

React to this headline:

North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report Read More »

US Sanctions North Korean Cyberespionage Group Kimsuky

Cyberwarfare, North Korea, Sanctions / SecurityTicks

US Sanctions North Korean Cyberespionage Group Kimsuky 01/12/2023 at 15:01 By Eduard Kovacs The US has announced sanctions against North Korean cyberespionage group Kimsuky over its intelligence gathering activities. The post US Sanctions North Korean Cyberespionage Group Kimsuky appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

US Sanctions North Korean Cyberespionage Group Kimsuky Read More »

US Sanctions Cryptocurrency Mixer Sinbad for Aiding North Korean Hackers

Cryptocurrency, cybercrime, North Korea, Sanctions / SecurityTicks

US Sanctions Cryptocurrency Mixer Sinbad for Aiding North Korean Hackers 30/11/2023 at 16:02 By Ionut Arghire US Treasury sanctions Sinbad, saying the cryptocurrency mixer is laundering funds for North Korean hacking group Lazarus. The post US Sanctions Cryptocurrency Mixer Sinbad for Aiding North Korean Hackers appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

US Sanctions Cryptocurrency Mixer Sinbad for Aiding North Korean Hackers Read More »

US Treasury sanctions crypto mixer Sinbad, alleging North Korea ties

Government, North Korea, regulation, Sanctions, United States / SecurityTicks

US Treasury sanctions crypto mixer Sinbad, alleging North Korea ties 29/11/2023 at 20:02 By Cointelegraph By Turner Wright The government department has previously imposed sanctions on crypto mixers Blender and Tornado Cash despite many in the space pushing back on actions against software tools. This article is an excerpt from Cointelegraph.com News View Original Source

React to this headline:

US Treasury sanctions crypto mixer Sinbad, alleging North Korea ties Read More »