NORTH KOREA IS THE THREAT
Contents
EXECUTIVE SUMMARY
Lately, North Korean threat actors have been extremely visible, attacking several industries and disrupting the operations of many organizations. While attacks from North Korea are not unusual, there has been an uptick in activity from the region. In April 2022, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released a joint advisory highlighting the activity of the North Korean state-sponsored APT group, Lazarus – also known as APT38.
As the rest of the world was focused on the cyber war between Russia and Ukraine, Lazarus was launching their own attacks. At the time, Lazarus was using social engineering to trick victims into downloading Trojanized cryptocurrency applications on Windows or macOS operating systems. According to CISA, Lazarus used the applications to gain access to their victims’ computer, propagate malware across their network, and steal private keys – activities that enabled follow-on activities that initiate fraudulent …
Lately, North Korean threat actors have been extremely visible, attacking several industries and disrupting the operations of many organizations. While attacks from North Korea are not unusual, there has been an uptick in activity from the region. In April 2022, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released a joint advisory highlighting the activity of the North Korean state-sponsored APT group, Lazarus – also known as APT38.
As the rest of the world was focused on the cyber war between Russia and Ukraine, Lazarus was launching their own attacks. At the time, Lazarus was using social engineering to trick victims into downloading Trojanized cryptocurrency applications on Windows or macOS operating systems. According to CISA, Lazarus used the applications to gain access to their victims’ computer, propagate malware across their network, and steal private keys – activities that enabled follow-on activities that initiate fraudulent …
IoC
06d29b5f1611303a792bb335ecafdd228cf0a1ffd55629f8cc1b9ce25d7fb378
07b2457f6e71d0b75693b6fecf9c88e7
0b97f9e91e374aa7d27823f9648b253b7c851b22
0c2dde41d508941cf215fe8f1f7e03a7
0ec2cfae9709b12236052e43356e37df2bf8601d76b48937cb14cc4c237c4ca7
114f22f3dd6928bed5c779fa918a8f11
157e31eb70e2f28059f100f85317fcce
193.56.29.123
1a536709554860fcc2c147374556205d
1fd8fef169bf48cfdcf506151264128c
210db61d1b11c1d233fd8a0645946074
238e6952a990fd3f6b75569feceb26a2
23b5811baa6cc9e562185571579ce5bc
2450961c630bc9a047a8b529323c55898c4a29ad5697154ac75d6828e85cfccd
2677f9871cb340750e582cb677d40e81
2c73cf2356a9005850fb2d07d024b2f2
2fc71184be22ed1b504b75d7bde6e46caac0bf63a913e7a74c3b65157f9bf1df
3265b2d5e61971c43a076347fb405c4b
32dda97cab8876215d771e398dd10f84
3361fa242eb7e6162fd4682471f4e952
33e00fcd263ee84688c6aab238373efeeb536616
352d1850f2f6030fa4481728df2575448e88f28169b2f3702465d32b0e61476b
364801240ed176e73a257ee86f573a2264027ecd
37505b6ff02a679e70885ccd60c13f3b
3fa45dcacf2193759086319c0d264341
40de99fb06e52e3364f2cd70f100ff71
4382384feb5ad6b574f68e431006905e
4433edb19f368e56d903a4ed0aa25a2e
44be20c67a80af8066f9401c5bee43cb
4548c7f157d300ec39b1821db4daa970
490b2496434e6a20dae758d0b6fc6e00
4b77fa3e1fe5a5d880467418f13ae6cb84366cca
4e9ba92b357dcfa79f64f2ca829d31935b5a93059022414ca894a070b625da66
51c9d5a26c0924a74bdc6879335878eb60a9dcc2
5498c3eb2fb335aadcaf6c5d60560c5d2525997ba6af39b191f6092cb70a3aa6
556abc167348fe96abfbf5079c3ad488
56b5fec59e118ba324ccee8a336f7f12
56df55ef50e9b9c891437c7148a0764a
596251e844abdaa77eeca905f0cb7677
5b5247ee7b43f51092ab07a1d1a31936
5f593020255279aa5eb654a695e88cf53942f461
62b0fa29bcc317c59c5f5e7fd3a867bc
6402fafa0864460fea18a83ec4885bfe179734b2
6df608342938f0d30a058c48bb9d8d4d
71def16f01ce0f57afe7b19c104a24e5
728b908e90930c73edeb1bf58b6a3a64
75ae786fe89491dc57509801c212fa8b
76a87057cb72139ed2a2c6776949aabd15134ba887b05bf1e56d46f3e97cda87
7953f5b1ed7b0b0ac778a2d47f44195c
7a3e966d30fe5d52cfe97d998e8c49cb
7b07cd6bb6b5d4ed6a2892a738fe892b
7fb868e6baf93a86d7a6a17ac00f4827
809f60589ee8be7daf075446c2180eaa
8289771e7eeffd28fb8a9e1bdeb3e86c
85f24b0f10b77b033e6e66ae8b7d55fc
86b523d2f19e1628e8c74602a51ebff9
8735788b2422c7ab910953178af57376
8b6d472fa9ec0023d7a35bdd7b8b2d4f
8bb7c8e8b723b02ffdcf6ff52444a810
8d28e28c1ee6f133441b6d71f7f8bcba
8e6d7d7385eb2867bda605e5e3ac4e59dc7ae9c2
90f2b7845c203035f0d7096aa28dda83
94fb3a34ecbde3435934f4cb44d86ff8ea37fda32b2b2ee17881c65654d91e8d
96d86472ff283f6959b7a779f004dfba
96f5ef3d58a750a6db60f2e0566dc6e6
99fc54786a72f32fd44c7391c2171ca31e72ca52725c68e2dde94d04c286fccd
a132b3f3a88565cde7435dfe921bca17e5026ffd
a225b7aff737dea737cd969fb307df23
a2f513d27c18a885490e0e824c48d6cdb162af28
a7c17e5fa55bcc60d4cff64dd37d0a1f0cc93f4f44b3cebd5633ca5af413e5cc
a871511ef8abae9f103a3dfe77b12b6d
a87614a2c7c66c7f13f0b170e4837ede
ae7275988753fffb29bdb254babdf46773daf935b2721006fe66a1747af3d1d4
b18d2d4e77fc567306d406c75b75dc53
b237b484c5c0fb020952e99b1134a527
b2a3d4261b0a6845d9ee4f395261946842964591804dfa474355b8e8bd1ad00f
b4d1a0a6aaa52d30ca7082a070cd33ef81a60962
b63335a46a5096de1783da08b8709ce7b77c13073a2c6f87f7b392e95ae0d616
b6ba7e07b4867e4bd36dc9713744aedc
b80d15cbb729e6ca86e3b41924407c30
bb3a0dc01309162971ad6a11c5cb159fe93fedee
bb6662ed3f058a737674be6749c7e6f2
bb9ee3a6504fbf6a5486af04dbbb5da5
bd0f789ace4def9196ce26588c3f41f8
bd416ea51f94d815b5b5b66861cbdcc5
bdfb5071f5374f5c0a3714464b1fa5e6
bea866b327a2dc2aa104b7ad7307008919c06620771ec3715a059e675d9f40af
beb6601397e208d2793aaa7be297b0f4
c0097cfa2e05ab1d18cf3dad93d98050
c17234de3a14deadf84c7acc614345484d10c43a72cccb748de6357b0066c48a
c32f40f304777df7cfab428a54bb818b
c4a69dab3f8369d2f823c538590de345
c4b29c58d2b2173a184c857d494f72a96ef5b7950261dc93a755d435e818a941
c5ad15506ab05f054d547587111d6393
c5ae757463b2015ef2d472fa26aec0f6aac1fa3f
c791d7fc5216d4035825f4efb714ba0e
cf4ad12ef7de85a4a2d468082c510665d41abc12
d19dd02cf375d0d03f557556d5207061
d7f6b09775b8d90d79404eda715461b7
d9f2acfed7ede76f110334e2c572b74e
db0483aced77a7db130a6100aef67967
ddf966990bc4bdb40b67b8eda0ae1fd7
de87429f36935c6610b3e338211dc388cbb290cf
dfb8d00ce89172bfc7ee7b73b37129a9
e206db4ddad984fe67bb44748f3ea6c38665ae8a
e220659c6eee4c051d670bde48a4aa1d79eb4c65
e2e5644e77e75e422bde075f409d882e
e36cee3e23f3ab5557e547ce02b5bf3d
e4df8b86d669e1eb36add172972bcb27
e732bc87033a935bd2d3d56c7772641b
edde6a385c86f60342831f24c3651925
f8fc2445a9814ca8cf48a979bff7f182d6538f4d1ff438cf259268e8b4b76f86
feab39a0e08849ef1c748931943dfb6de0ca922b
[email protected]
http://193.56.29.123
http://matmq3z3hiovia3voe2tix2x54sghc3tszj74xgdy4tqtypoycszqzqd.onion
07b2457f6e71d0b75693b6fecf9c88e7
0b97f9e91e374aa7d27823f9648b253b7c851b22
0c2dde41d508941cf215fe8f1f7e03a7
0ec2cfae9709b12236052e43356e37df2bf8601d76b48937cb14cc4c237c4ca7
114f22f3dd6928bed5c779fa918a8f11
157e31eb70e2f28059f100f85317fcce
193.56.29.123
1a536709554860fcc2c147374556205d
1fd8fef169bf48cfdcf506151264128c
210db61d1b11c1d233fd8a0645946074
238e6952a990fd3f6b75569feceb26a2
23b5811baa6cc9e562185571579ce5bc
2450961c630bc9a047a8b529323c55898c4a29ad5697154ac75d6828e85cfccd
2677f9871cb340750e582cb677d40e81
2c73cf2356a9005850fb2d07d024b2f2
2fc71184be22ed1b504b75d7bde6e46caac0bf63a913e7a74c3b65157f9bf1df
3265b2d5e61971c43a076347fb405c4b
32dda97cab8876215d771e398dd10f84
3361fa242eb7e6162fd4682471f4e952
33e00fcd263ee84688c6aab238373efeeb536616
352d1850f2f6030fa4481728df2575448e88f28169b2f3702465d32b0e61476b
364801240ed176e73a257ee86f573a2264027ecd
37505b6ff02a679e70885ccd60c13f3b
3fa45dcacf2193759086319c0d264341
40de99fb06e52e3364f2cd70f100ff71
4382384feb5ad6b574f68e431006905e
4433edb19f368e56d903a4ed0aa25a2e
44be20c67a80af8066f9401c5bee43cb
4548c7f157d300ec39b1821db4daa970
490b2496434e6a20dae758d0b6fc6e00
4b77fa3e1fe5a5d880467418f13ae6cb84366cca
4e9ba92b357dcfa79f64f2ca829d31935b5a93059022414ca894a070b625da66
51c9d5a26c0924a74bdc6879335878eb60a9dcc2
5498c3eb2fb335aadcaf6c5d60560c5d2525997ba6af39b191f6092cb70a3aa6
556abc167348fe96abfbf5079c3ad488
56b5fec59e118ba324ccee8a336f7f12
56df55ef50e9b9c891437c7148a0764a
596251e844abdaa77eeca905f0cb7677
5b5247ee7b43f51092ab07a1d1a31936
5f593020255279aa5eb654a695e88cf53942f461
62b0fa29bcc317c59c5f5e7fd3a867bc
6402fafa0864460fea18a83ec4885bfe179734b2
6df608342938f0d30a058c48bb9d8d4d
71def16f01ce0f57afe7b19c104a24e5
728b908e90930c73edeb1bf58b6a3a64
75ae786fe89491dc57509801c212fa8b
76a87057cb72139ed2a2c6776949aabd15134ba887b05bf1e56d46f3e97cda87
7953f5b1ed7b0b0ac778a2d47f44195c
7a3e966d30fe5d52cfe97d998e8c49cb
7b07cd6bb6b5d4ed6a2892a738fe892b
7fb868e6baf93a86d7a6a17ac00f4827
809f60589ee8be7daf075446c2180eaa
8289771e7eeffd28fb8a9e1bdeb3e86c
85f24b0f10b77b033e6e66ae8b7d55fc
86b523d2f19e1628e8c74602a51ebff9
8735788b2422c7ab910953178af57376
8b6d472fa9ec0023d7a35bdd7b8b2d4f
8bb7c8e8b723b02ffdcf6ff52444a810
8d28e28c1ee6f133441b6d71f7f8bcba
8e6d7d7385eb2867bda605e5e3ac4e59dc7ae9c2
90f2b7845c203035f0d7096aa28dda83
94fb3a34ecbde3435934f4cb44d86ff8ea37fda32b2b2ee17881c65654d91e8d
96d86472ff283f6959b7a779f004dfba
96f5ef3d58a750a6db60f2e0566dc6e6
99fc54786a72f32fd44c7391c2171ca31e72ca52725c68e2dde94d04c286fccd
a132b3f3a88565cde7435dfe921bca17e5026ffd
a225b7aff737dea737cd969fb307df23
a2f513d27c18a885490e0e824c48d6cdb162af28
a7c17e5fa55bcc60d4cff64dd37d0a1f0cc93f4f44b3cebd5633ca5af413e5cc
a871511ef8abae9f103a3dfe77b12b6d
a87614a2c7c66c7f13f0b170e4837ede
ae7275988753fffb29bdb254babdf46773daf935b2721006fe66a1747af3d1d4
b18d2d4e77fc567306d406c75b75dc53
b237b484c5c0fb020952e99b1134a527
b2a3d4261b0a6845d9ee4f395261946842964591804dfa474355b8e8bd1ad00f
b4d1a0a6aaa52d30ca7082a070cd33ef81a60962
b63335a46a5096de1783da08b8709ce7b77c13073a2c6f87f7b392e95ae0d616
b6ba7e07b4867e4bd36dc9713744aedc
b80d15cbb729e6ca86e3b41924407c30
bb3a0dc01309162971ad6a11c5cb159fe93fedee
bb6662ed3f058a737674be6749c7e6f2
bb9ee3a6504fbf6a5486af04dbbb5da5
bd0f789ace4def9196ce26588c3f41f8
bd416ea51f94d815b5b5b66861cbdcc5
bdfb5071f5374f5c0a3714464b1fa5e6
bea866b327a2dc2aa104b7ad7307008919c06620771ec3715a059e675d9f40af
beb6601397e208d2793aaa7be297b0f4
c0097cfa2e05ab1d18cf3dad93d98050
c17234de3a14deadf84c7acc614345484d10c43a72cccb748de6357b0066c48a
c32f40f304777df7cfab428a54bb818b
c4a69dab3f8369d2f823c538590de345
c4b29c58d2b2173a184c857d494f72a96ef5b7950261dc93a755d435e818a941
c5ad15506ab05f054d547587111d6393
c5ae757463b2015ef2d472fa26aec0f6aac1fa3f
c791d7fc5216d4035825f4efb714ba0e
cf4ad12ef7de85a4a2d468082c510665d41abc12
d19dd02cf375d0d03f557556d5207061
d7f6b09775b8d90d79404eda715461b7
d9f2acfed7ede76f110334e2c572b74e
db0483aced77a7db130a6100aef67967
ddf966990bc4bdb40b67b8eda0ae1fd7
de87429f36935c6610b3e338211dc388cbb290cf
dfb8d00ce89172bfc7ee7b73b37129a9
e206db4ddad984fe67bb44748f3ea6c38665ae8a
e220659c6eee4c051d670bde48a4aa1d79eb4c65
e2e5644e77e75e422bde075f409d882e
e36cee3e23f3ab5557e547ce02b5bf3d
e4df8b86d669e1eb36add172972bcb27
e732bc87033a935bd2d3d56c7772641b
edde6a385c86f60342831f24c3651925
f8fc2445a9814ca8cf48a979bff7f182d6538f4d1ff438cf259268e8b4b76f86
feab39a0e08849ef1c748931943dfb6de0ca922b
[email protected]
http://193.56.29.123
http://matmq3z3hiovia3voe2tix2x54sghc3tszj74xgdy4tqtypoycszqzqd.onion