#north-korea-cyber-threats
#north-korea-cyber-threats
[ follow ]
#cybersecurity #malware #north-korea #iran #critical-infrastructure #hacking #social-engineering #phishing #axios
fromThe Hacker News
8 hours agoMirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads
Mirax integrates advanced Remote Access Trojan (RAT) capabilities, allowing threat actors to fully interact with compromised devices in real time, enhancing its operational value significantly.
Roam Research
#cybersecurity
Privacy professionals
fromFortune
4 days agoFirst they went after medtech, then Kash Patel. Iranian hackers' next target is likely 'low-hanging fruit' in water, energy, and tourism, experts say | Fortune
Iran-linked hackers are targeting high-profile figures and critical infrastructure in the U.S. and Israel to sow disruption.
Remote teams
fromTheregister
3 weeks agoNorth Korean's 100k fake IT workers net $500M a year for Kim
North Korea operates a sophisticated fake IT worker scheme generating $500 million annually, with over 100,000 operatives in 40 countries infiltrating companies to steal money and sensitive information.
Information security
fromSecurityWeek
1 month agoIran-Linked Hackers Take Aim at US and Other Targets, Raising Risk of Cyberattacks During War
Pro-Iranian hackers are expanding cyberattacks from the Middle East into the United States, targeting defense contractors, medical device companies, and critical infrastructure like power stations and water plants.
fromwww.theguardian.com
1 month agoNorth Korean agents using AI to trick western firms into hiring them, Microsoft says
The scam typically involves state-backed fraudsters applying for remote IT work in the west, using fake identities and the help of facilitators in the country where the company targeted is based. Once hired, they send their wages back to Kim Jong-un's state and have even been known to threaten to release sensitive company data after being fired.
Information security
Information security
fromThe Hacker News
1 month agoNorth Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT
North Korean threat actors deployed 26 malicious npm packages using steganography to hide command-and-control infrastructure in Pastebin essays, targeting developers with credential stealers and remote access trojans.
fromThe Hacker News
2 months agoNorth Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations
The North Korea-linked threat actor known as UNC1069 has been observed targeting the cryptocurrency sector to steal sensitive data from Windows and macOS systems with the ultimate goal of facilitating financial theft. "The intrusion relied on a social engineering scheme involving a compromised Telegram account, a fake Zoom meeting, a ClickFix infection vector, and reported usage of AI-generated video to deceive the victim," Google Mandiant researchers Ross Inman and Adrian Hernandez said.
Information security
fromSecurityWeek
2 months agoCyber Insights 2026: Cyberwar and Rising Nation State Threats
Entering the cyber world is stepping into a warzone. Cyber is considered a war zone, and what happens there is described as cyberwar. But it's not that simple. War is conducted by nations (political), not undertaken by criminals (financial). Both are increasing in this war zone we call cyber, but the political threat is growing fast. Cyberwar is a complex subject, and a formal definition is difficult.
Information security
Information security
fromThe Hacker News
1 month agoGoogle Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations
State-sponsored and criminal actors from China, Iran, North Korea, and Russia target the defense industrial base, prioritizing drones, hiring exploitation, edge-device access, and supply-chain risk.
[ Load more ]