lazarusholic

Everyday is lazarus.dayβ

Twitter suspends two accounts used by DPRK hackers to catfish security researchers

2021-10-15, TheRecord
https://therecord.media/twitter-suspends-two-accounts-used-by-dprk-hackers-to-catfish-security-researchers/
#News #DreamJob

Contents

Twitter suspends two accounts used by DPRK hackers to catfish security researchers
Twitter has suspended today two accounts operated by North Korean government hackers and used as part of a clever plot to attract security researchers to malicious sites and infect their systems with malware.
The accounts —@lagal1990 and @shiftrows13— are part of a long-lived DPRK cyber-espionage campaign that began last year and specifically targets members of the cybersecurity community.
First exposed by the Google Threat Analysis Group in January this year, this campaign is still ongoing.
At the time, Google said that North Korean agents worked for months to create personas for fake security researchers on various social networks, such as Twitter, LinkedIn, Telegram, Discord, and Keybase, which they used to post infosec-related content, gain a reputation in the industry, and reach out to security researchers.
If victims responded, the DPRK hackers would ask researchers to work together on various projects and eventually lure …