Latest North Korea news

US sanctions Bitcoin laundering service used by North Korean hackers

The US Department of Treasury today sanctioned cryptocurrency mixer Blender.io used last month by the North Korean-backed Lazarus hacking group to launder funds stolen from Axie Infinity's Ronin bridge.
- Sergiu Gatlan
- May 06, 2022
- 11:17 AM
- 0
New ransomware strains linked to North Korean govt hackers

Several ransomware strains have been linked to APT38, a North Korean-sponsored hacking group known for its focus on targeting and stealing funds from financial institutions worldwide.
- Sergiu Gatlan
- May 03, 2022
- 06:31 PM
- 1
North Korean hackers targeting journalists with novel malware

North Korean state-sponsored hackers known as APT37 have been discovered targeting journalists specializing in the DPRK with a novel malware strain.
- Bill Toulas
- April 25, 2022
- 01:51 PM
- 0
US warns of Lazarus hackers using malicious cryptocurrency apps

CISA, the FBI, and the US Treasury Department warned today that the North Korean Lazarus hacking group is targeting organizations in the cryptocurrency and blockchain industries with trojanized cryptocurrency applications.
- Sergiu Gatlan
- April 18, 2022
- 05:47 PM
- 0
FBI links largest crypto hack ever to North Korean hackers

The Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned the address that received the cryptocurrency stolen in the largest cryptocurrency hack ever, the hack of Axie Infinity's Ronin network bridge.
- Sergiu Gatlan
- April 14, 2022
- 01:40 PM
- 0
Ethereum dev imprisoned for helping North Korea evade sanctions

Virgil Griffith, a US cryptocurrency expert, was sentenced on Tuesday to 63 months in prison after pleading guilty to assisting the Democratic People's Republic of Korea (DPRK) with technical info on how to evade sanctions.
- Sergiu Gatlan
- April 12, 2022
- 05:42 PM
- 0
DPRK hackers go after crypto assets using trojanized DeFi Wallet app

Hackers associated with the North Korean government have been distributing a trojanized version of the DeFi Wallet for storing cryptocurrency assets to gain access to the systems of cryptocurrency users and investors.
- Ionut Ilascu
- March 31, 2022
- 08:05 AM
- 0
Kimsuki hackers use commodity RATs with custom Gold Dragon malware

South Korean researchers have spotted a new wave of activity from the Kimsuky hacking group, involving commodity open-source remote access tools dropped with their custom backdoor, Gold Dragon.
- Bill Toulas
- February 08, 2022
- 03:35 PM
- 0
Lazarus hackers use Windows Update to deploy malware

North Korean-backed hacking group Lazarus has added the Windows Update client to its list of living-off-the-land binaries (LoLBins) and is now actively using it to execute malicious code on Windows systems.
- Sergiu Gatlan
- January 27, 2022
- 01:31 PM
- 2
BlueNoroff hackers steal crypto using fake MetaMask extension

The North Korean threat actor group known as 'BlueNoroff' has been spotted targeting cryptocurrency startups with malicious documents and fake MetaMask browser extensions.
- Bill Toulas
- January 13, 2022
- 03:14 PM
- 0
APT37 targets journalists with Chinotto multi-platform malware

North Korean state hacking group APT37 targets South Korean journalists, defectors, and human rights activists in watering hole, spear-phishing emails, and smishing attacks delivering malware dubbed Chinotto capable of infecting Windows and Android devices.
- Sergiu Gatlan
- November 29, 2021
- 08:43 AM
- 0
North Korean cyberspies target govt officials with custom malware

A state-sponsored North Korean threat actor tracked as TA406 was recently observed deploying custom info-stealing malware in espionage campaigns.
- Bill Toulas
- November 18, 2021
- 09:47 AM
- 0
Lazarus hackers target researchers with trojanized IDA Pro

A North Korean state-sponsored hacking group known as Lazarus is again trying to hack security researchers, this time with a trojanized pirated version of the popular IDA Pro reverse engineering application.
- Lawrence Abrams
- November 10, 2021
- 12:08 PM
- 0
North Korean state hackers start targeting the IT supply chain

North Korean-sponsored Lazarus hacking group has switched focus on new targets and was observed by Kaspersky security researchers expanding its supply chain attack capabilities.
- Sergiu Gatlan
- October 26, 2021
- 01:23 PM
- 0
Ethereum dev admits to helping North Korea evade crypto sanctions

Cryptocurrency expert Virgil Griffith pled guilty today to assisting the Democratic People's Republic of Korea in evading U.S. sanctions by conspiring to violate the International Emergency Economic Powers Act (IEEPA) and Executive Order 13466.
- Sergiu Gatlan
- September 27, 2021
- 03:14 PM
- 0
South Korea's Nuclear Research agency hacked using VPN flaw

South Korea's 'Korea Atomic Energy Research Institute' disclosed yesterday that their internal networks were hacked last month by North Korean threat actors using a VPN vulnerability.
- Lawrence Abrams
- June 19, 2021
- 01:59 PM
- 0
North Korean hackers behind CryptoCore multi-million dollar heists

Security researchers piecing together evidence from multiple attacks on cryptocurrency exchanges, attributed to a threat actor they named CryptoCore have established a strong connection to the North Korean state-sponsored group Lazarus.
- Ionut Ilascu
- May 24, 2021
- 10:02 AM
- 0
North Korean hackers use new Vyveva malware to attack freighters

The North Korean-backed Lazarus hacking group used new malware with backdoor capabilities dubbed Vyveva by ESET researchers in targeted attacks against a South African freight logistics company.
- Sergiu Gatlan
- April 08, 2021
- 09:01 AM
- 0
Google: North Korean hackers target security researchers again

Google's Threat Analysis Group (TAG) says that North Korean government-sponsored hackers are once again targeting security researchers using fake Twitter and LinkedIn social media accounts.
- Sergiu Gatlan
- March 31, 2021
- 01:33 PM
- 1
North Korean hackers target defense industry with custom malware

A North Korean-backed hacking group has targeted the defense industry with custom backdoor malware dubbed ThreatNeedle since early 2020 with the end goal of collecting highly sensitive information.
- Sergiu Gatlan
- February 25, 2021
- 11:14 AM
- 0