lazarusholic

Everyday is lazarus.dayβ

« 2024

Total 420 reports

2024-10-04
Genians
김수키(Kimsuky)그룹의 'BlueShark' 위협 전술 분석
#BlueShark #Kimsuky
2024-10-03
Kandji
Another PDF Viewer - Is It Malicious?
#macOS #RustBucket
2024-10-03
Securonix
SHROUDED#SLEEP: A Deep Dive into North Korea’s Ongoing Campaign Against Southeast Asia
#APT37 #VeilShell
2024-10-02
Barracuda
How North Korean APT groups exploit DMARC misconfigurations — and what you can do about it
#DMARC #Kimsuky
2024-10-02
CoinDesk
How North Korea Infiltrated the Crypto Industry
#Cryptocurrency #ITWorker
2024-10-02
Symantec
Stonefly: Extortion Attacks Continue Against U.S. Targets
#Preft #Stonefly
2024-10-02
S2W
Go-ing Arsenal: A Closer Look at Kimsuky’s Go Strategic Advancement
#AppleSeed #Kimsuky #SeedpuNK #TrollStealer
2024-10-01
BfV
North Korean IT Workers
#ITWorker
2024-10-01
Sakai
우리 민족의 해킹단체 북한 김수키(Kimsuky) 만든 파워셀 악성코드-pow.ps1(2024.9.23)
#Kimsuky
2024-09-30
PolySwarm
Labyrinth Chollima Using Poisoned Python Packages to Deliver PondRAT
#LabyrinthChollima #PondRAT #POOLRAT #PyPI
2024-09-27
Aliyun
朝鲜组织Kimsuky投放xml恶意软件
#Kimsuky #XML
2024-09-26
PaloaltoNetworks
Unraveling Sparkling Pisces’s Tool Set: KLogEXE and FPSpy
#FPSpy #KLogEXE #SparklingPisces
2024-09-26
Sakai
김수키(Kimsuky) 보조금신청 관련문의건 으로 위장 하는 악성코드(2024.9.23)
#Kimsuky #LNK
2024-09-23
Mandiant
Staying a Step Ahead: Mitigating the DPRK IT Worker Threat
#ITWorker #UNC5267
2024-09-20
Rekt
BingX
#BingX #Cryptocurrency
2024-09-20
Sakai
김수키(Kimsuky)암호화폐 거래소 업비트 사칭 악성코드-Upbit_20240916 docx lnk(2024.9.17)
#Kimsuky #LNK
2024-09-19
Blackcell
Hunting APT Infrastructure with Validin
#Kimsuky
2024-09-19
NSHC
Monthly Threat Actor Group Intelligence Report, June 2024 (JPN)
#SectorA #SectorA01 #SectorA02 #SectorA05 #SectorA07 #Trend
2024-09-18
Ahnlab
강연의뢰서로 위장한 Kimsuky 그룹 악성코드(MSC, HWP)
#Kimsuky #MSC
2024-09-18
PaloaltoNetworks
Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors
#GleamingPisces #PondRAT #PyPI
2024-09-18
Elastic
Code of Conduct: DPRK’s Python-fueled intrusions into secured networks
#VMConnect
2024-09-17
Mandiant
An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader
#BURNBOOK #MISTPEN #UNC2970
2024-09-17
somedieyoungZZ
Kimsuky A Gift That Keeps on Giving
#Kimsuky #LNK
2024-09-17
Sakai
북한 해킹 조직 김수키(Kimsuky)에서 만든 연세 대학교 피싱 사이트-drive yonsei ackr(2024.9.10)
#Kimsuky #Phishing
2024-09-16
CoinDesk
Crypto Broker DeltaPrime Drained of Over $6M Amid Apparent Private Key Leak
#Cryptocurrency #DeltaPrime #News
2024-09-16
Rekt
DeltaPrime
#Cryptocurrency #DeltaPrime
2024-09-14
Aliyun
从Kimsuky组织msc攻击样本到GrimResource
#GrimResource #Kimsuky #MSC
2024-09-13
NKInternet
Exploring the North Korean Email Client: Features and Functionality
2024-09-13
Hauri
"북한 신형 자폭드론" 관련 내용으로 위장한 악성 MSC 문서
#Kimsuky #MSC
2024-09-13
Sakai
게임 링크 단축 및 수익 창출 LootLabs 으로 위장한것으로 추정 되는 김수키(Kimsuky) 악성코드-Twitch x Loot Lab Event-2025.msc(2024.9.9)
#Kimsuky #MSC
2024-09-12
Contagio
2023-11-23 BEAVERTAIL and INVISIBLE_FERRET Lazarus Group Malware Samples
#BeaverTail #InvisibleFerret
2024-09-12
Jamf
Jamf Threat Labs Observes Targeted Attacks Amid FBI Warnings
#Thiefbucket
2024-09-12
Cyfirma
APT PROFILE – KIMSUKY
#Kimsuky
2024-09-11
Microsoft
Citrine and Onyx Sleet: An Inside Look at North Korean Threat Actors
#CitrineSleet #OnyxSleet #Podcast
2024-09-11
Rekt
Indodax
#Cryptocurrency #Indodax2
2024-09-10
Contagio
2024-09-10 KIMSUKY (North Korean APT) Sample (Sakai @sakaijjan - Terms and Conditions.msc)
#Kimsuky #MSC
2024-09-10
Sakai
김수키(Kimsuky) 에서 만든 악성코드-Terms and conditions(이용 약관).msc(2024.9.6)
#Kimsuky #MSC
2024-09-10
ReversingLabs
Fake recruiter coding tests target devs with malicious Python packages
#Lazarus #PyPI #VMConnect
2024-09-09
PaloaltoNetworks
Threat Assessment: North Korean Threat Groups
#AlluringPisces #CollectionRAT #Comebacker #Fullhouse #GleamingPisces #JumpyPisces #KANDYKORN #ObjCShellz #OdicLoader #POOLRAT #PondRAT #RustBucket #SelectivePisces #SlowPisces #SmoothOperator #SparklingPisces
2024-09-06
Ahnlab
러시아와 북한 파트너쉽에 관한 논문을 위장한 APT 공격 (Kimsuky)
#Kimsuky
2024-09-05
Sakai
고려 대학교 하고 관련이 있을것 같은 김수키(Kimsuky) 만든 악성코드(2024.9.1)
#Kimsuky #LNK
2024-09-05
Genians
코니(Konni) 위협 세계관의 확장 분석 리포트
#Konni
2024-09-04
Group-IB
APT Lazarus: Eager Crypto Beavers, Video calls and Games
#BeaverTail #CivetQ #ContagiousInterview #InvisibleFerret #Lazarus #MiroTalk
2024-09-03
SentinelOne
North Korean IT Worker Threat
#ITWorker #Trend
2024-09-03
Mandiant
DeFied Expectations — Examining Web3 Heists
#CovertCatch #RustBucket #Cryptocurrency
2024-09-03
USFBI
North Korea Aggressively Targeting Crypto Industry with Well-Disguised Social Engineering Attacks
#News #Cryptocurrency
2024-09-02
Contagio
2024-08-21 MOONPEAK malware from North Korean UAT-5394 Samples
#MoonPeak #UAT-5394
2024-09-02
Contagio
2022-2024 North Korea Citrine Sleet /Lazarus FUDMODULE ( BYOVD ) Rootkit Samples
#CitrineSleet #FudModule
2024-09-02
SandsLab
부가가치세 신고 파일로 위장한 문서형 악성코드 분석 (Konni APT 캠페인)
#Konni #LNK
2024-09-02
Sakai
항공우주공학 부분을 노리는 김수키(Kimsuky)만든 악성코드-강의의뢰서(2024.8.29)
#Kimsuky #MSC
2024-08-31
Microsoft
North Korean threat actor Citrine Sleet exploiting Chromium zero-day
#CVE-2024-7971 #CitrineSleet
2024-08-29
Sakai
김수키(Kimsuky)에서 만든 항공우주공학과 관련자 타겟팅 악성코드-강의의뢰서(2024.8.29)
#Kimsuky #MSC
2024-08-29
Phylum
North Korea Still Attacking Developers via npm
#ContagiousInterview #MoonstoneSleet #NPM
2024-08-29
NSHC
Monthly Threat Actor Group Intelligence Report, July 2024 (KOR)
#SectorA #SectorA01 #SectorA04 #SectorA05 #SectorA07 #Trend
2024-08-29
KRCERT
닥터소프트 NetClient5 제품 보안 업데이트 권고
#NetClient
2024-08-28
Hauri
MSC 파일을 이용한 BabyShark 악성코드
#BabyShark #Kimsuky #MSC
2024-08-28
Sakai
북한 해킹 단체 라자루스(Lazarus) 추측이 되는 악성코드-WerFault.lnk(2024.8.19)
#LNK #Lazarus
2024-08-27
NSHC
Monthly Threat Actor Group Intelligence Report, June 2024 (ENG)
#SectorA #SectorA01 #SectorA02 #SectorA05 #SectorA07 #Trend
2024-08-26
Blackwater
WazirX Cyber Heist
#Cryptocurrency #WazirX
2024-08-26
PolySwarm
DevPopper Campaign Targets Software Developers
#NPM #DevPopper
2024-08-26
Sakai
김수키(Kimsuky)에서 만든 고속국도 제29호선 세종-안성 간 건설공사 송장으로 위장 하는 악성코드-도x기업 20240610 송장.bmp.lnk(2024.7.30)
#Kimsuky #LNK
2024-08-25
Trmlabs
Argentinian Authorities Arrest Russian National for Laundering the Crypto Proceeds of Illicit Activity
#MoneyLaundering
2024-08-24
Zscaler
From Surveillance to Espionage: Unraveling the Latest Strategies of the Kimsuky Group
#Kimsuky #Slides #Diehl
2024-08-23
Sakai
북한 해킹 단체 Konni(코니) 에서 만든 악성코드-integration.pdf.lnk(2024.8.22)
#Konni
2024-08-22
S2W
Threat Tracking: Analysis of puNK-003’s Lilith RAT ported to AutoIt Script
#LINKON #AutoIt #puNK-003 #CURKON #LNK #LilithRAT
2024-08-22
Nurilab
Kimsuky VBS RAT 악성코드 분석 보고서
#Kimsuky #BabyShark
2024-08-21
CiscoTalos
MoonPeak malware from North Korean actors unveils new details on attacker infrastructure
#MoonPeak #UAT-5394 #XenoRAT
2024-08-21
Sakai
북한 해킹 조직 김수키(Kimsuky) 에서 만든 악성코드-한중 북중 안보현안 비공개 정책간담회 계획.lnk(2024.8.20)
#Kimsuky #LNK
2024-08-20
CrowdStrike
Hunting the Rogue Insiders Operating for FAMOUS CHOLLIMA
#FamousChollima #Podcast
2024-08-19
KBS
북한 IT개발자, 국내 앱도 개발?…“해킹 도구로 악용 위험”
#News #ITWorker
2024-08-19
NSHC
Monthly Threat Actor Group Intelligence Report, May 2024 (JPN)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA07 #SectorA01 #SectorA04
2024-08-19
NSHC
Monthly Threat Actor Group Intelligence Report, April 2024 (JPN)
#Trend #SectorA05 #SectorA #SectorA07 #SectorA01
2024-08-19
Qianxin
网络安全威胁2024年中报告
#Trend #APT37 #Konni #Kimsuky #Lazarus
2024-08-19
Sakai
김수키(Kimsuky) 에서 만든 msc 파일 로 위장하는 악성코드-Skibidi Boilet Master.msc(2024.8.16)
#Kimsuky #MSC
2024-08-16
GenDigital
Safeguarding Digital Freedom: How a Gen Discovery Helped to Protect Windows Users Everywhere
#CVE-2024-38193 #Lazarus
2024-08-16
Kandji
TodoSwift Disguises Malware Download Behind Bitcoin PDF
#BlueNoroff #macOS #KANDYKORN
2024-08-15
Chainalysis
2024 Crypto Crime Mid-Year Update Part 1: Cybercrime Climbs
#Trend #Cryptocurrency
2024-08-15
ZachXBT
Recently a team reached out to me for assistance after $1.3M was stolen
#Cryptocurrency #ITWorker
2024-08-14
Hauri
백신 관리 서버 취약점 조치 안내
#ViRobot
2024-08-14
somedieyoungZZ
Kimsuky 5
#Kimsuky
2024-08-14
Cinder
We found North Korean engineers in our application pile. Here's what our ex-CIA co founders did about it.
#ITWorker
2024-08-13
Group-IB
Group-IB researchers noticed a Windows version of BeaverTail, which was attributed to Lazarus
#Lazarus #BeaverTail
2024-08-13
Sakai
북한 해킹 단체 김수키(Kimsuky) 에서 만든 240903-회국회(정) 제1차 전체회의 의사일정안(결산,안건 상정,현안 보고)2024.8.1
#Kimsuky #CHM
2024-08-12
Sakai
김수키(Kimsuky) 에서 만든 연세대학교 웹메일 피싱 사이트 간단 분석(2024.8.11)
#Phishing #Kimsuky
2024-08-10
Nexera
7 August 2024 Incident: Post Mortem Report From the Nexera Team
#InvisibleFerret #ITWorker #Nexera #BeaverTail
2024-08-10
Nexera
7 August 2024 Incident: Understanding the Malware Used
#InvisibleFerret #ITWorker #Nexera #BeaverTail
2024-08-09
Donga
대북정찰 핵심자산 ‘백두-금강’ 기술 털렸다
#News #DefenseContractors
2024-08-08
Ahnlab
2024년 07월 APT 공격 동향 보고서(국내)
#Trend #LNK
2024-08-08
USJustice
Department Disrupts North Korean Remote IT Worker Fraud Schemes Through Charges and Arrest of Nashville Facilitator
#News #ITWorker
2024-08-07
Checkmarx
A Year-Long Campaign of North Korean Actors Targeting Developers via Malicious npm Packages
#NPM
2024-08-07
CyberResilience
APT Group Kimsuky Targets University Researchers
#Phishing #Kimsuky #GreenDinosaur
2024-08-07
CrowdStrike
CrowdStrike 2024 Threat Hunting Report
#FamousChollima #Trend #BeaverTail #InvisibleFerret #ITWorker
2024-08-07
Sakai
김수키(Kimsuky) 에서 만든 악성코드-민혜지2.jre(2024.7.24)
#Kimsuky #JSE
2024-08-05
KRNCSC
북한 해킹조직의 건설ㆍ기계 분야 기술절취 주의
#Kimsuky #DoraRAT #TrollAgent #Andariel
2024-08-02
TruthLabs
A showing @WazirX: India Ka Bitcoin Exchange's own misleading actions and security lapses
#WazirX #Cryptocurrency
2024-08-01
Datadog
Stressed Pungsan: DPRK-aligned threat actor leverages npm for initial access
#NPM #StressedPungsan
2024-08-01
Sakai
북한 해킹 단체 김수키(Kimsuky)에서 만든 PowerShell 백도어 도구(2024.2.29)
#Kimsuky
2024-07-31
CSIS
How Are Cyberattacks Fueling North Korea’s Nuclear Ambitions?
#Trend #APT45
2024-07-31
AttackIQ
Emulating the Politically Motivated North Korean Adversary Andariel – Part 2
#Andariel #Blacksmith
2024-07-31
Donga
北에 해커 8400명… 러와 악성코드 공동 개발
#News
2024-07-31
Chosun
PC 침투→거점 확보→데이터 유출… 北의 법원 해킹 수법
#News #SeoulCourt
2024-07-31
Securonix
Research Update: Threat Actors Behind the DEV#POPPER Campaign Have Retooled and are Continuing to Target Software Developers via Social Engineering
#DevPopper #NPM
2024-07-31
Genians
AutoIt 활용 방어 회피 전술의 코니 APT 캠페인 분석
#AutoIt #LNK #Konni
2024-07-30
NSHC
Monthly Threat Actor Group Intelligence Report, June 2024 (KOR)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA07 #SectorA01
2024-07-30
Sakai
북한 해킹 단체 김수키(Kimsuky) 구글 드라이브로 위장한 사이트-gplokio(.)site(2024.7.23)
#Kimsuky
2024-07-29
NSHC
2023 Activities Summary of SectorA groups (JPN)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA01
2024-07-28
WazirX
Day-Wise Report: WazirX Cyber Attack Incident
#WazirX
2024-07-27
MuditGupta
WazirX hacked but Liminal is to blame?
#WazirX #Cryptocurrency
2024-07-27
YNA
정보사 내부망의 대북요원 정보, 군무원 개인 노트북 거쳐 유출
#News
2024-07-26
AttackIQ
Response to CISA Advisory (AA24-207A)
#Andariel
2024-07-26
NSHC
Monthly Threat Actor Group Intelligence Report, March 2024 (JPN)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA07 #SectorA01
2024-07-25
WazirX
WazirX Cyber Attack: Key Insights and Learnings
#WazirX
2024-07-25
USJustice
North Korean Government Hacker Charged for Involvement in Ransomware Attacks Targeting U.S. Hospitals and Health Care Providers
#Maui #Andariel #MoneyLaundering #ArkansasHealthcare #CaliforniaDefense #ChineseEnergy #ColoradoMedical #ConnecticutHealthcare #FloridaHospital #KansasHospital #MassachusettsDefense #MichiganDefense #NASA #OregonDefense #RandolphAirForce #RobinsAirForce #SouthKoreanManufacturing #TaiwaneseDefense
2024-07-25
Microsoft
Onyx Sleet uses array of malware to gather intelligence for North Korea
#LightHand #OnyxSleet #TigerRAT #SmallTiger #BlackRAT #ValidAlpha
2024-07-25
Ahnlab
국내 금융 기업 대상으로 유포 중인 악성 LNK
#LNK
2024-07-25
USCISA
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
#YARA #Andariel
2024-07-25
Mandiant
APT45: North Korea’s Digital Military Machine
#APT45 #SHATTEREDGLASS #Maui #KKNPP
2024-07-25
Sakai
북한 해킹 단체 Konni(코니) 암호화폐 거래소 빗썸(Bithumb) 정보 업데이트 요청으르로 위장한 악성코드-금융당국 요청에 따른 프로젝트 정보 확인 요청의 건.zip(2024.7.23)
#Konni #LNK
2024-07-24
Stacklok
North Korean State Actors Exploit Open Source Supply Chain via Malicious npm Package
#NPM
2024-07-24
CriminalIP
Kimsuky Hackers Create Phishing Site Mimicking Korea University: Are They Targeting Entire Research Institutions?
#Phishing #Kimsuky
2024-07-23
KnowBe4
How a North Korean Fake IT Worker Tried to Infiltrate Us
#ITWorker
2024-07-22
Sakai
김수키 에서 만든 피싱 사이트 고려대학교 지식기반 포털시스템-osihi(.)store/korea(2024.7.21)
#Phishing #Kimsuky
2024-07-19
Liminal
Update on WazirX Incident
#Cryptocurrency #WazirX
2024-07-19
Cyfirma
APT Quarterly Highlights : Q2 2024
#Trend #Andariel #Kimsuky #MoonstoneSleet #Lazarus
2024-07-18
Rekt
WazirX
#WazirX #Cryptocurrency
2024-07-18
RecordedFuture
Despite Sanctions, North Koreans Continue to Use Foreign Technology
#Sanctions
2024-07-18
Elliptic
$235 million lost by WazirX in North Korea-linked breach
#WazirX #Cryptocurrency
2024-07-18
WazirX
Preliminary Report: Cyber Attack on WazirX Multisig Wallet
#WazirX #News
2024-07-18
ZachXBT
So I began tracing the $230M+ WazirX hack
#WazirX #Cryptocurrency
2024-07-18
MuditGupta
WazirX hacked for over $230m USD (2,000 cr INR)
#WazirX #Cryptocurrency
2024-07-17
Sakai
북한 해킹 단체 김수키(Kimsuky)에서 만든 악성코드-근로신청서 관련의 건.docx.lnk(2024.7.9)
#Kimsuky #LNK
2024-07-16
Rapid7
Kimsuky's Phishing and Payload Tactics
#Kimsuky
2024-07-15
ZachXBT
DPRK IT workers are typically easy to spot and are not the smartest individuals
#ITWorker #Munchables
2024-07-15
Validin
Hunting Lazarus: Expanding Indicators with Historic DNS
#DNS #Lazarus
2024-07-15
Objective-see
This Meeting Should Have Been an Email
#BeaverTail #MiroTalk
2024-07-15
Darkatlas
Kimsuky APT: The TrollAgent Stealer Analysis
#Kimsuky #TrollAgent
2024-07-14
ZachXBT
So far in July 2024 more than $35M from the $305M DMM Bitcoin hack has been laundered to the online marketplace Huione Guarantee
#DMM #Cryptocurrency #Lazarus
2024-07-12
ThreatBook
APT组织Konni对韩最新攻击细节曝光
#Konni
2024-07-12
CoinStats
Security Incident Report
#News #CoinStats
2024-07-12
NSHC
Monthly Threat Actor Group Intelligence Report, May 2024 (ENG)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA07 #SectorA01 #SectorA04
2024-07-10
Elliptic
Huione Guarantee: The multi-billion dollar marketplace used by online scammers
#MoneyLaundering
2024-07-09
HackersEye
CheckMesh: Hidden Threats in Your FW
#LilacSquid #CheckMesh #MeshAgent
2024-07-09
Tay
Crypto folks (hopefully) already know that Lazarus is one of the most prevalent threat actors targeting this industry
#Trend #Cryptocurrency
2024-07-08
Whitestream
Is Lazarus behind the UwU_Lend hack from several weeks ago?
#Suspicious #UwULend #Lazarus
2024-07-08
Phylum
New Tactics from a Familiar Threat
#NPM
2024-07-08
JPCERT
日本の組織を狙った攻撃グループKimsukyによる攻撃活動
#Kimsuky
2024-07-08
JPCERT
Attack Activities by Kimsuky Targeting Japanese Organizations
#Kimsuky
2024-07-05
Ahnlab
Kimsuky 그룹이 사용하는 Github Repository
#Kimsuky #FlowerPower
2024-07-05
Qihoo360
揭秘APT-C-26（Lazarus）组织利用PyPI对Windows、Linux和macOS平台的攻击行动
#APT-C-26 #PyPI
2024-07-05
Ahnlab
Kimsuky Group's New Backdoor Appears (HappyDoor)
#Kimsuky #HappyDoor
2024-07-04
Sakai
국세청 사칭 북한의 해킹 그룹 Konni(코니)에서 만든 악성코드-부가가치세 수정신고 안내(부가가치세사무처리규정).hwp(2024..6.27).lnk
#Konni #LNK
2024-07-02
Slowmist
2024 Mid-year Blockchain Security and AML Annual Report
#Trend #Cryptocurrency
2024-07-01
NSHC
Monthly Threat Actor Group Intelligence Report, May 2024 (KOR)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA07 #SectorA01 #SectorA04
2024-07-01
Ahnlab
Xctdoor Malware Used in Attacks Against Korean Companies (Andariel)
#HOTCROISSANT #Xctdoor #KSystem #Andariel #Rifdoor
2024-06-28
PaloaltoNetworks
Threat Actor Groups Tracked by Palo Alto Networks Unit 42
#SlowPisces #JumpyPisces
2024-06-28
CryptoEvgen
The hack of Bitcoin DMM is associated with hackers from the DPRK
#DMM #Cryptocurrency
2024-06-28
KRCERT
TTPs #11: Operation An Octopus - 중앙 집중형 관리 솔루션을 노리는 공격전략 분석
#AnOctopus #Andariel
2024-06-28
Sakai
북한 해킹 단체 김수키(Kimsuky)에서 만든 악성코드-강연의뢰서_엄구호 교수님.docx.lnk(2024.6.4)
#Kimsuky #LNK
2024-06-27
Hauri
구직자의 가상화폐를 노리는 Lazarus 그룹
#Cryptocurrency #Lazarus
2024-06-27
Zscaler
Kimsuky deploys TRANSLATEXT to target South Korean academia
#Kimsuky #TRANSLATEXT
2024-06-27
Nurilab
고미르 악성코드 분석 보고서
#Gomir #Kimsuky
2024-06-26
CloudSEK
North Korean Cyber Espionage Group Kimsuky Intensifies Attacks on South Korean Entities
#Kimsuky
2024-06-26
SentinelOne
ChamelGang & Friends | Cyberespionage Groups Attacking Critical Infrastructure with Ransomware
#Suspicious #Andariel
2024-06-26
Ahnlab
Kimsuky 그룹의 신규 백도어 등장 (HappyDoor)
#Kimsuky #HappyDoor
2024-06-25
AlexLab
Update on the ALEX Incident Investigation
#AlexLab #News
2024-06-24
Hunt
Good Game, Gone Bad: Xeno RAT Spread Via .gg Domains and GitHub
#XenoRAT
2024-06-24
Bleepingcomputer
CoinStats says North Korean hackers breached 1,590 crypto wallets
#News #CoinStats
2024-06-24
Ahnlab
국내 기업 대상 공격에 사용 중인 Xctdoor 악성코드 (Andariel)
#Xctdoor #Andariel #Rifdoor #HOTCROISSANT #KSystem
2024-06-23
MurAll
MurAll Community Update: Our Response to the Hack
#MurAll
2024-06-22
CoinStats
Update on the Security Incident
#Suspicious #CoinStats #News
2024-06-21
Sakai
북한 해킹 그룹인 Konni(코니)로 추정 이 되는 2024년 북한인권 민간단체 전략활동 지원사업 신청서.lnk(2024.6.11)
#Konni #LNK
2024-06-20
Qianxin
疑似Kimsuky（APT-Q-2）以军工招聘为饵攻击欧洲
#APT-Q-2
2024-06-19
Malspace
North Korean APTs and Russian Rockets
#Podcast #ScarCruft
2024-06-19
Cyberarmor
New North-Korean based backdoor packs a punch
#Kimsuky #Niki
2024-06-18
KRNIS
국정원, 정보보호업체 대상 최근 사이버 위협사례 현장 설명회 개최
#News
2024-06-18
NSHC
Monthly Threat Actor Group Intelligence Report, April 2024 (ENG)
#Trend #SectorA05 #SectorA #SectorA07 #SectorA01
2024-06-18
Sakai
국세청 사칭 북한의 해킹 그룹 Konni(코니)에서 만든 악성코드-VAT.hwp(2024.6.13)
#Konni #LNK
2024-06-17
Splunk
LNK or Swim: Analysis & Simulation of Recent LNK Phishing
#LNK
2024-06-14
Cyfirma
THE CHANGING : CYBER THREAT LANDSCAPE ASIA-PACIFIC (APAC) REGION — Volume 2
#Trend
2024-06-13
SharkTeam
Analysis of the UwU Lend Attack
#UwULend
2024-06-13
Avertium
Everything You Need to Know About LilacSquid
#LilacSquid #UAT-4820
2024-06-13
Checkmarx
A New North Korean Group Emerges, Disrupting the Open Source Ecosystem
#JadeSleet #NPM #MoonstoneSleet
2024-06-13
Ahnlab
Keylogger Installed Using MS Office Equation Editor Vulnerability (Kimsuky)
#Kimsuky #CVE-2017-11882
2024-06-12
Google
Insights on Cyber Threats Targeting Users and Enterprises in Brazil
#PAEKTUSAN #AGAMEMNON #PUKCHONG #PRONTO #UNC4899 #Trend
2024-06-12
Qihoo360
APT-C-55（Kimsuky）组织在RandomQuery活动中投递开源RAT的攻击活动分析
#APT-C-55 #XenoRAT #RandomQuery
2024-06-11
Slowmist
Analysis of the UwU Lend Hack
#UwULend
2024-06-11
Sakai
북한 해킹 단체 김수키(Kimsuky)에서 만든 피싱 안드로이드 악성코드-8.aab(2024.3.22)
#Kimsuky
2024-06-11
Ahnlab
SmallTiger Malware Used Against South Korean Businesses (Kimsuky and Andariel)
#Kimsuky #SmallTiger #DurianBeacon #Andariel
2024-06-11
Ahnlab
APT Attacks Using Cloud Storage
#XenoRAT #LNK
2024-06-10
Rekt
Uwulend
#UwULend
2024-06-10
Resecurity
Organized North Korean Remote IT Worker Fraud Compels Organizations to Enhance Hiring Verification Controls With Next-Gen CTI
#ITWorker
2024-06-08
Cyfirma
THE CHANGING : CYBER THREAT LANDSCAPE ASIA-PACIFIC (APAC) REGION – Volume 1
#Trend
2024-06-07
Dimitribest
Kimsuky is targeting an arms manufacturer in Europe
#Kimsuky #YARA
2024-06-06
Sakai
우리 북한 해킹 단체 Reaper(리퍼)에서 만든 악성코드-인문사회분야 박사과정생 연구장려금지원 신청자격 요건 확인서.hwp(2024.5.24)
#APT37
2024-06-05
ErvinZubic
Can We Adapt YARA to Fight DeFi Attacks? A Lazarus Group Case Study Sparks the Question
#DeFi #YARA
2024-06-04
NSHC
Monthly Threat Actor Group Intelligence Report, April 2024 (KOR)
#Trend #SectorA05 #SectorA #SectorA07 #SectorA01
2024-06-03
Genians
외신 인터뷰 의뢰 사칭 김수키 공격 발견
#Kimsuky #ReconShark
2024-06-03
Plainbit
Alphapo/CoinsPaid Hot Wallet Hack
#CoinsPaid #Alphapo
2024-06-03
Sakai
북한의 해킹 그룹 Konni(코니)에서 만든 악성코드-김명희_20240515.xlsx(2024.5.16)
#Konni #LNK
2024-05-31
Elliptic
DMM Bitcoin loses $308 million in "unauthorized leak"
#DMM #Cryptocurrency
2024-05-31
Rekt
DMM Bitcoin
#Cryptocurrency #DMM
2024-05-31
Qihoo360
假面之下：Konni组织冒充政府软件安装包攻击剖析
#Konni
2024-05-31
NSHC
Monthly Threat Actor Group Intelligence Report, March 2024 (ENG)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA07 #SectorA01
2024-05-30
Akamai
RedTail Cryptominer Threat Actors Adopt PAN-OS CVE-2024-3400 Exploit
#CVE-2024-3400 #RedTail #Miner
2024-05-30
CiscoTalos
LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoader
#InkBox #InkLoader #LilacSquid #MeshAgent #UAT-4820 #PurpleInk #QuasarRAT
2024-05-30
Ahnlab
Analysis of APT Attack Cases Using Dora RAT Against Korean Companies (Andariel Group)
#DoraRAT #Andariel #Nestdoor
2024-05-29
Ahnlab
MS-Office 수식 편집기 취약점을 이용해 설치되는 키로거 (Kimsuky)
#Kimsuky #CVE-2017-11882
2024-05-29
USTreasury
Illicit Finance Risk Assessment of Non-Fungible Tokens
#NFT
2024-05-28
Microsoft
Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks
#NPM #ITWorker #MoonstoneSleet #FakePenny #Storm-1789 #PuTTY #Storm-1877 #DeTankWar
2024-05-28
Hauri
네이버로 위장한 피싱 공격
#Phishing #Kimsuky
2024-05-28
Sakai
우리 북한 해킹 단체 김수키(Kimsuky)에서 만든 피싱 사이트-hogmasil(.)lol(1)(2024.3.22)
#Phishing #Kimsuky
2024-05-27
Aliyun
Kimsuky组织最新Linux.Gomir后门功能&通信模型剖析及攻击场景复现
#Gomir #Kimsuky
2024-05-27
Ahnlab
국내 기업 대상 공격에 사용 중인 SmallTiger 악성코드 (Kimsuky, Andariel 그룹)
#Kimsuky #Andariel #DurianBeacon #SmallTiger
2024-05-27
ESTSecurity
국정원을 사칭하여 유포중인 이메일 주의!
#Phishing
2024-05-23
GenDigital
Beyond espionage — how the Lazarus Group is reshaping cybersecurity threats
#Lazarus
2024-05-23
Ahnlab
Cloud storage를 활용하는 APT 공격
#XenoRAT #LNK
2024-05-22
errbody
DPRK-Research
#Konni #Kimsuky #ScarCruft #RokRAT
2024-05-22
Sakai
xxx 토큰 유통량 및 락업 스케줄 로 위장한 Konni(코니) 에서 만든 악성코드-xxx 토큰 유통량 및 락업 스케줄(2024.5.13)
#Konni #LNK
2024-05-22
NSHC
2023 Activities Summary of SectorA groups (ENG)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA01
2024-05-21
RecordedFuture
Meet the guy who single-handedly took down North Korea's Internet
#NKInternet #Podcast
2024-05-20
YNA
軍 고위급 개인 이메일 해킹당해 경찰 수사…北 소행인 듯
#Phishing #Defense #News #MilitaryOfficials
2024-05-17
Rekt
AlexLab
#AlexLab
2024-05-16
USJustice
Charges and Seizures Brought in Fraud Scheme, Aimed at Denying Revenue for Workers Associated with North Korea
#News #ITWorker
2024-05-16
Symantec
Springtail: New Linux Backdoor Added to Toolkit
#Gomir #Springtail #TrollStealer #GoBear
2024-05-16
Ahnlab
Dora RAT을 이용한 국내 기업 대상 APT 공격 사례 분석 (Andariel 그룹)
#Andariel #DoraRAT #Nestdoor
2024-05-15
ESET
ESET APT Activity Report Q4 2023–Q1 2024
#Trend #WebLogTea #Andariel #Kimsuky #Konni #ScarCruft
2024-05-14
Aliyun
Xeno-RAT通信模型剖析及自动化解密脚本实现
#Kimsuky #XenoRAT
2024-05-14
Chainalysis
North Korea's Crypto Heists: Jessica Peck, Chris Wong - Ep. 109
#Cryptocurrency #Podcast
2024-05-14
Avast
Avast Q1/2024 Threat Report
#CVE-2024-21338 #Trend #BYOVD
2024-05-14
NSHC
Monthly Threat Actor Group Intelligence Report, March 2024 (KOR)
#Trend #SectorA05 #SectorA #SectorA02 #SectorA07 #SectorA01
2024-05-13
KRCERT
그누보드 제품 보안 업데이트 권고
#Kimsuky
2024-05-13
Aliyun
以美国和韩国为目标的Kimsuky最新钓鱼活动攻击组件及木马攻击链剖析
#Phishing #Kimsuky #XenoRAT
2024-05-13
Dimitribest
Lazarus Group Targets Blockchain Developers with Social Engineering and Visual Deception Techniques in Code
#ContagiousInterview
2024-05-13
KRNPA
북, 법원 전산망 해킹 및 자료 1,014GB 절취
#News #SeoulCourt
2024-05-10
Genians
페이스북과 MS관리콘솔을 활용한 Kimsuky APT 공격 발견
#Kimsuky #ReconShark #MSC
2024-05-10
Qianxin
针对区块链从业者的招聘陷阱：疑似Lazarus（APT-Q-1）窃密行动分析
#APT-Q-1 #ContagiousInterview
2024-05-09
Kaspersky
APT trends report Q1 2024
#Trend #NPM #Andariel #ThreatNeedle #Kimsuky #AppleSeed #Durian
2024-05-08
USCOURTS
UNITED STATES OF AMERICA v. 280 VIRTUAL CURRENCY ACCOUNTS
#Cryptocurrency #Forfeiture
2024-05-08
Proofpoint
macOS Components Used in North Korean Crypto-Heists
#Youtube #macOS #Slides
2024-05-08
Ahnlab
CHM Malware Stealing User Information Being Distributed in Korea
#CHM #Kimsuky
2024-05-07
Ahnlab
LNK File Disguised as Certificate Distributing RokRAT Malware
#RokRAT #LNK #RedEyes
2024-05-06
Sakai
탈세제보로 위장한 Konni(코니) 에서 만든 악성코드-첨부1_소명자료 목록(탈세제보)(2024.4.5)
#Konni #LNK
2024-05-02
USFBI
North Korean Actors Exploit Weak DMARC Security Policies to Mask Spearphishing Efforts
#Kimsuky #DMARC
2024-04-29
ZachXBT
How Lazarus Group laundered $200M from 25 hacks
#Cryptocurrency #Coinshfit #Steadefi #bZx #CoinMetro #Bondly #MGNR #EasyFi #FinNexus #NexusMutual #CoinBerry #Unibright #MaverickFounder #GeraCoin #Darshan #PolyPlay #Algorand
2024-04-26
Elliptic
Tracking illicit actors through bridges, DEXs, and swaps
#Cryptocurrency #MoneyLaundering
2024-04-26
SecuI
WinRAR 실행압축 파일과 Github 레파지토리를 이용한 APT 공격
#WinRAR
2024-04-25
Securonix
Analysis of DEV#POPPER: New Attack Campaign Targeting Software Developers Likely Associated With North Korean Threat Actors
#NPM #DevPopper
2024-04-25
Ahnlab
사용자 정보를 탈취하는 CHM 악성코드 국내 유포
#Kimsuky #CHM
2024-04-25
NSHC
2023 Activities Summary of SectorA groups (KOR)
#Trend #SectorA #SectorA01 #SectorA02 #SectorA05
2024-04-24
Phylum
Nation-State Threat Actors Renew Publications to npm
#NPM #macOS
2024-04-24
NSHC
Monthly Threat Actor Group Intelligence Report, February 2024 (JPN)
#Trend #SectorA
2024-04-23
Avast
GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining
#Kimsuky #PuTTY #GuptiMiner #eScan
2024-04-23
Qihoo360
APT-C-28（ScarCruft）组织利用恶意LNK文件投递RokRat攻击的活动分析
#APT-C-28 #RokRAT #LNK
2024-04-23
KRNPA
경찰청·방위사업청 등 관계기관 합동 특별점검을 통해 북한의 케이(K)-방산업체 해킹 공격 규명 및 보호조치 실시
#Kimsuky #News #Andariel #DefenseContractors
2024-04-23
Ahnlab
RokRAT 악성코드를 유포하는 LNK 파일 (수료증 위장)
#RokRAT #LNK #RedEyes
2024-04-22
38north
What We Learned Inside a North Korean Internet Server: How Well Do You Know Your Partners?
#News #ITWorker
2024-04-22
NSHC
Monthly Threat Actor Group Intelligence Report, February 2024 (ENG)
#Trend #SectorA
2024-04-22
Sakai
북한 해킹 단체 김수키(Kimsuky)에서 만든 피싱 메일 도구-MailSending(Phishing mail tool,2024.4.19)
#Kimsuky
2024-04-20
Thecyberwire
The art of information gathering.
#DMARC #TA427 #Podcast
2024-04-18
Avast
From BYOVD to a 0-day: Unveiling Advanced Exploits in Cyber Recruiting Scams
#BYOVD #FudModule #CVE-2024-21338 #KaolinRAT #Slides
2024-04-18
Avast
From BYOVD to a 0-day: Unveiling Advanced Exploits in Cyber Recruiting Scams
#FudModule #CVE-2024-21338 #KaolinRAT #BYOVD
2024-04-17
AttackIQ
Target Locked: Operation Sharpshooter
#Sharpshooter
2024-04-17
Genians
APT43 배후의 다단계 드롭박스 명령과 TutorialRAT
#APT43 #TutorialRAT #LNK
2024-04-16
Slowmist
United Nations Security Council References SlowMist’s Expert Analysis in Recent Report
#Cryptocurrency #Trend
2024-04-16
Proofpoint
From Social Engineering to DMARC Abuse: TA427’s Art of Information Gathering
#DMARC #TA427
2024-04-12
Sakai
북한 해킹 단체 Konni(코니) 에서 만든 악성코드-북한 내부정보시장통제 관련 내부 동향 및 물가.hwp.lnk(2024.4.4)
#Konni
2024-04-11
InterpresSecurity
Return of the mac(OS): Transparency, Consent, and Control (TCC) Database Manipulation
#APT37 #CloudMensis #macOS #JokerSpy
2024-04-10
somedieyoungZZ
Kimsuky 4
#Kimsuky #LNK
2024-04-10
AttackIQ
Intercept the Adversary: Lazarus Group - Operation In(ter)ception
#Inception
2024-04-09
SentinelOne
North Korea's ScarCruft gang is behind some very crafty phishin' campaigns
#Podcast #ScarCruft
2024-04-09
CriminalIP
메시에이전트 C2 탐지: 잠재적 악성코드 공격을 예방하는 방법
#Andariel #MeshAgent
2024-04-09
Sakai
북한 해킹 단체 Reaper(리퍼)에서 만든 악성코드-제20대_대통령선거_선거권자_개표참관인_공개_모집(최종).hwp(2022.8.15)
#TEMP.Reaper
2024-04-07
Symantec
Vedalia APT group exploits oversized LNK files in malware campaign
#Vedalia #LNK
2024-04-05
Plainbit
Analysis of *.chm malware
#CHM
2024-04-04
Wired
A Vigilante Hacker Took Down North Korea’s Internet. Now He’s Taking Off His Mask
#NKInternet #News
2024-04-04
Microsoft
East Asia threat actors employ unique methods
#Sleet #Trend
2024-04-04
AttackIQ
Confronting Lazarus Group - MagicRAT and TigerRAT Campaign
#MagicRAT #TigerRAT
2024-04-03
Hauri
주중 한국대사관을 사칭한 스피어피싱 메일
#Kimsuky
2024-04-03
Norfolk
North Korea’s Post-Infection Python Payloads
#LabyrinthChollima #NPM
2024-04-03
NSHC
Monthly Threat Actor Group Intelligence Report, January 2024 (JPN)
#Trend #SectorA
2024-04-03
Plainbit
Analysis of ROKRAT Malware inside LNK Malicious file from North Korea
#RokRAT #LNK
2024-04-03
Sakai
주중대사관 을 타겟으로 추측이 되는 Kimsuky(김수키) 만든 악성코드-202404주중대사관 정책간담회.rar(2024.3.29)
#Kimsuky #LNK
2024-04-02
KRCERT
윈도우 도움말 파일(CHM)악용 해킹수법 주의 권고
#CHM #News
2024-03-30
haidragon
揭开 Kimsuky 黑客的面纱
#Kimsuky #TODDLERSHARK
2024-03-29
NSHC
Monthly Threat Actor Group Intelligence Report, February 2024 (KOR)
#Trend #SectorA05 #SectorA #SectorA01
2024-03-28
KRMOFA
한미, 북핵･미사일 자금 조달 북한 IT 인력 활동 공동 제재
#News #ITWorker #Sanctions
2024-03-28
Sakai
김수키(Kimsuky) 가상화폐(암호 화폐)로 위장한 트레이딩 스파르타코스 강의안-100불남(2차).pdf(2024.1.22)
#Kimsuky #LNK
2024-03-28
NSHC
Monthly Threat Actor Group Intelligence Report, December 2023 (JPN)
#Trend #SectorA
2024-03-27
CertiK
Blast Chain's $97 Million Battle: Are North Korean Hackers Rusty?
#Suspicious #Munchables
2024-03-27
CoinDesk
The Munchables Hack Is Way Worse Than It Seems
#Suspicious #News #Munchables
2024-03-27
Genians
APT37 그룹의 RoKRAT 파일리스 공격 증가
#APT37 #RokRAT #LNK
2024-03-26
Qianxin
Konni组织针对虚拟货币行业投递AutoIt恶意软件
#AutoIt #LNK #Konni
2024-03-26
JPNPA
北朝鮮IT労働者に関する企業等に対する注意喚起
#News #ITWorker
2024-03-26
Ahnlab
Malware Disguised as Installer from Korean Public Institution (Kimsuky Group)
#Kimsuky #Endoor #Nikidoor #AsungSoft
2024-03-26
NSHC
Monthly Threat Actor Group Intelligence Report, January 2024 (ENG)
#Trend #SectorA
2024-03-25
Aliyun
推陈出新！Kimsuky组织最新远控组件攻击场景复现
#Kimsuky
2024-03-25
Logpresso
Kimsuky의 TrollAgent를 탐지하는 YARA rule 작성가이드
#Kimsuky #TrollAgent #YARA
2024-03-22
errbody
Kimsuky-Android-RAT-Client
#Kimsuky
2024-03-22
Hauri
DropBox를 이용한 Kimsuky 악성코드
#Kimsuky #LNK
2024-03-21
Symantec
Springtail APT group abuses valid certificate of known Korean public entity
#Springtail
2024-03-21
SecuI
"북한지 기고문"을 위장하여 유포된 LNK 악성코드
#APT37 #RokRAT #LNK
2024-03-20
Symantec
New DEEP#GOSU campaign attributed to Springtail APT (aka Kimsuky)
#Springtail
2024-03-20
Rapid7
The Updated APT Playbook: Tales from the Kimsuky threat actor group
#Kimsuky #CHM
2024-03-19
Ahnlab
Andariel Group Exploiting Korean Asset Management Solutions (MeshAgent)
#ModeLoader #Andariel #AndarLoader #MeshAgent
2024-03-19
Ahnlab
국내 공공기관의 설치 파일을 위장한 악성코드 (Kimsuky 그룹)
#Kimsuky #Endoor #Nikidoor #AsungSoft
2024-03-18
Securonix
Analysis of New DEEP#GOSU Attack Campaign Likely Associated with North Korean Kimsuky Targeting Victims with Stealthy Malware
#Kimsuky #LNK
2024-03-17
Cyberpoking
H0lyGh0st (SiennaPurple) Ransomware
#H0lyGh0st #YARA
2024-03-15
Qihoo360
APT-C-55（Kimsuky）组织的RandomQuery窃密攻击活动分析
#APT-C-55 #RandomQuery
2024-03-14
RustyNoob619
Detects a malicious DLL used by a North Korean Threat actor Lazarus
#YARA
2024-03-14
Ahnlab
AhnLab EDR을 활용한 웹 브라우저 계정 정보 탈취 악성코드 탐지
#Andariel
2024-03-14
Elliptic
North Korean Hackers Return to Tornado Cash Despite Sanctions
#HECO #HTX #MoneyLaundering
2024-03-13
Genians
비트코인 시세 급등에 따른 해킹 피해 주의보
#Konni #LNK
2024-03-12
somedieyoungZZ
Kimsuky 3
#Kimsuky #YARA
2024-03-12
ESTSecurity
북 킴수키(Kimsuky) 조직의 정책 자문 위장 스피어 피싱 주의!
#Kimsuky
2024-03-11
Ahnlab
국내 자산 관리 솔루션을 악용하여 공격 중인 Andariel 그룹 (MeshAgent)
#ModeLoader #Andariel #AndarLoader #MeshAgent
2024-03-11
Sakai
북한 해킹 단체 Konni(코니)에서는 만든 업비트 사칭 악성코드-첨부1_성명_개인정보수집이용동의서.docx.lnk(2024.03.07)
#Konni
2024-03-11
NSHC
Monthly Threat Actor Group Intelligence Report, January 2024 (KOR)
#Trend #SectorA
2024-03-09
somedieyoungZZ
Kimsucky 2
#Kimsuky
2024-03-07
UN
S/2024/215 Final report of the Panel of Experts
#CyberLink #JumpCloud #Andariel #Kimsuky #BlueNoroff #ScarCruft #Alphapo #CoinsPaid #Merlin #Steadefi #Fantom #Terraport #UnoRe #HECO #HTX #OrbitBridge #Poloniex #NexusMutual #Indodax #CoinEx #bZx #Qubit #DeFiance #Bondly #Fetchai #MGNR #EasyFi #FinNexus #Eterbase #KuCoin #Cryptopia #AlgoCapital #CoinTiger #BiKi #CoinBene #Gateio #Coinrail #Bancor #Tradeio #CoinSecure #Cypherium #Taylor #Sanctions
2024-03-07
knight0x07
Kimsuky-PS-Backdoor: Kimsuky PowerShell Backdoor Analysis
#Kimsuky #YARA
2024-03-06
SBS
북 해킹조직 '김수키', 북한전문기자 노렸다…메일 내용 보니
#Kimsuky #News
2024-03-05
USJustice
USA v. 113 VIRTUAL CURRENCY ACCOUNTS
#Cryptocurrency #Forfeiture
2024-03-05
Qianxin
Espionage Operation Disguised as Software Installers by Kimsuky (APT-Q-2)
#D2Innovation #APT-Q-2
2024-03-05
Intel471
Cybercrime Exposed Podcast: Crypto Heist
#Cryptocurrency #Podcast
2024-03-05
Hunt
Open Directory Exposes Phishing Campaign Targeting Google & Naver Credentials
#Kimsuky #XenoRAT
2024-03-05
Kroll
TODDLERSHARK: ScreenConnect Vulnerability Exploited to Deploy BABYSHARK Variant
#TODDLERSHARK #CVE-2024-1709 #CVE-2024-1708 #KTA082
2024-03-04
Sakai
북한 해킹 단체 APT37 Reaper(리퍼)에서 만든 악성코드-(안보칼럼) 반국가세력에 안보기관이 무기력해서는 안된다.zip(2024.02.22)
#APT37 #RokRAT
2024-03-04
安恒信息
APT37利用朝鲜政治话题针对韩国的攻击活动分析
#APT37 #RokRAT
2024-03-04
Nocutnews
'사법부 해킹' 국정원 현장조사 종료…"北, AD 서버 해킹"
#News #SeoulCourt
2024-03-04
KRCOURT
사법부 전산망 침해사고에 관하여 국민들께 드리는 말씀
#News #SeoulCourt
2024-03-04
KRNIS
국정원, 반도체 업계에 ‘북한의 해킹 확산’ 주의 당부
#News
2024-03-02
somedieyoungZZ
Kimsucky Apt Analysis
#Kimsuky
2024-03-01
0x0v1
RE:archive | APT37's ROKRAT HWP Object Linking and Embedding
#APT37 #RokRAT
2024-02-29
Vipyrsec
Novel ELF64 Remote Access Tool Embedded in Malicious PyPI Uploads
#WebLogTea #PyPI
2024-02-28
Hunt
Phishing by Appointment: Suspected North Korean Hackers Target Blockchain Community Via Telegram
#Phishing #BlueNoroff
2024-02-28
Avast
Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day
#FudModule #BYOVD #CVE-2024-21338
2024-02-28
Group-IB
Group-IB reveals Hi-Tech Crime Trends 23/24: surge in ransomware against backdrop of growing AI, macOS threats
#Trend #Cryptocurrency
2024-02-28
Hauri
북한 김수키(Kimsuky) 조직의 스피어피싱 메일 공격 분석
#Kimsuky #Phishing
2024-02-28
JPCERT
New Malicious PyPI Packages used by Lazarus
#PyPI #Comebacker #BLINDINGCAN
2024-02-27
Aliyun
Lazarus APT组织针对海事研究组织进行网络攻击活动
#Lazarus #NukeSped
2024-02-27
Fortinet
FortiGuard Labs Outbreak Alerts Annual Report 2023: A Glimpse into the Evolving Threat Landscape
#LabyrinthChollima #Trend #Andariel #DiamondSleet
2024-02-27
NSHC
Monthly Threat Actor Group Intelligence Report, December 2023 (ENG)
#Trend #SectorA
2024-02-26
qianlan
APT37组织主战远控武器RokRAT，更新迭代部分执行流程
#APT37 #RokRAT
2024-02-23
Ahnlab
TrollAgent That Infects Systems Upon Security Program Installation Process (Kimsuky Group)
#D2Innovation #TrollAgent #Kimsuky
2024-02-22
SecuI
Kimsuky 그룹의 CHM 기반 정찰용 악성코드
#Kimsuky #CHM
2024-02-21
CrowdStrike
CrowdStrike 2024 Global Threat Report
#Chollima #Trend
2024-02-21
Mandiant
The North Korean IT Workers
#ITWorker #Podcast
2024-02-21
DCSO
To Russia With Love: Assessing a KONNI-Backdoored Suspected Russian Consular Software Installer
#Konni
2024-02-21
JPCERT
PyPIを悪用した攻撃グループLazarusのマルウェア拡散活動
#PyPI #Comebacker #BLINDINGCAN
2024-02-21
Genians
새해 오피니언 언론 칼럼 위장 해킹 분석
#LNK #XenoRAT
2024-02-20
Phylum
Fake Developer Jobs Laced With Malware
#NPM
2024-02-20
Logpresso
Kimsuky 악성코드 유포 사례
#Kimsuky
2024-02-19
KRNCSC
韓獨 합동 사이버 보안 권고문(北 방산분야 해킹)
#News #YARA
2024-02-19
NSHC
Monthly Threat Actor Group Intelligence Report, December 2023 (KOR)
#Trend #SectorA
2024-02-16
SOCRadar
Threat Actor Profile: ScarCruft / APT37
#ScarCruft
2024-02-16
Ahnlab
보안 프로그램 설치 과정에서 감염되는 TrollAgent (Kimsuky 그룹)
#Kimsuky #TrollAgent #D2Innovation
2024-02-15
Ahnlab
CTI, 값진 위협 정보를 제공하다
#TA-Ant #Youtube
2024-02-15
Chainalysis
Money Laundering Activity Spread Across More Service Deposit Addresses in 2023, Plus New Tactics from Lazarus Group
#MoneyLaundering #YoMix
2024-02-14
Microsoft
Staying ahead of threat actors in the age of AI
#EmeraldSleet
2024-02-14
YNA
尹 英방문 직전 행정관 이메일 해킹…대통령실 "사전포착해 조치"
#News
2024-02-14
YNA
北, 도박 사이트 수천개 제작해 한국 범죄 조직에 팔아넘겼다
#News
2024-02-14
Ahnlab
Kimsuky Group's Spear Phishing Detected by AhnLab EDR (AppleSeed, AlphaSeed)
#Kimsuky #AlphaSeed #AppleSeed
2024-02-08
S2W
Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer…
#D2Innovation #TrollStealer #Kimsuky
2024-02-08
Ahnlab
AhnLab EDR을 활용한 Kimsuky 그룹의 스피어 피싱 공격 탐지 (AppleSeed, AlphaSeed)
#Kimsuky #AlphaSeed #AppleSeed
2024-02-07
Sakai
Konni(코니) 만든 북한 시장 물가 분석 문서 위장 해서 공격 하는 악성코드-조선 시장 물가 분석(회령).hwp?(2023.11.17)
#Konni
2024-02-07
S2W
Kimsuky disguised as a Korean company signed with a valid certificate to distribute Troll Stealer
#D2Innovation #TrollStealer #Kimsuky
2024-02-05
Knownsec
知道创宇2023年度APT威胁 分析总结报告
#APT37 #Konni #Trend #Kimsuky
2024-02-02
Qianxin
全球高级持续性威胁（APT）2023年度报告
#Trend #APT-Q-1
2024-02-01
CrowdStrike
Demystifying North Korea: Why the "Hermit Kingdom" Is a Cyber Threat to Watch
#Chollima #Podcast
2024-02-01
Ahnlab
Account Credential-Stealing Malware Detected by AhnLab MDS (Web Browsers, Email, FTP)
#Kimsuky #Andariel
2024-01-31
AttackIQ
Dream Job, or Is It?
#DreamJob
2024-01-30
Sangfor
Kimsuky组织利用Dropbox云端实施行动分析
#Kimsuky #LNK
2024-01-30
Qianxin
软件安装包伪装下的Kimsuky（APT-Q-2）窃密行动
#APT-Q-2 #D2Innovation
2024-01-30
Qihoo360
《2023年全球高级持续性威胁研究报告》：芯片、5G、供应链等领域安全威胁加剧
#APT-C-28 #APT-C-55 #APT-C-26 #Whitepaper
2024-01-30
NSHC
Monthly Threat Actor Group Intelligence Report, November 2023 (JPN)
#Trend #SectorA
2024-01-29
KRNCSC
한미(독) 합동 보안권고문으로 보는 북의 해킹 활동
#Trend #Youtube
2024-01-29
Sakai
Konni(코니) 에서 만든 악성코드-NService_youngji057.chm(2023.11.18)
#Konni #CHM
2024-01-26
blockquiry
The Lazarus File: Decrypting the Enigma Using Obsidian — Part II
#Trend
2024-01-26
blockquiry
The Lazarus File: Decrypting the Enigma of Cyber Shadows — Part I
#Trend
2024-01-25
OrbitChain
‘오르빗 브릿지 익스플로잇’에 대한 입장문
#OrbitBridge
2024-01-25
KRCERT
Lazarus Group’s Large-scale Threats via Watering Hole and Financial Software
#Slides #Wateringhole
2024-01-24
Microsoft
North Korea Threat Landscape Update
#Podcast
2024-01-24
Ahnlab
AhnLab MDS를 활용한 계정 정보 탈취 악성코드 탐지 (웹 브라우저, 이메일, FTP)
#Kimsuky #Andariel
2024-01-24
Chainalysis
Stolen Crypto Falls in 2023, but Hacking Remains a Threat
#Trend #Cryptocurrency #AtomicWallet
2024-01-23
ConcentricFi
Concentric Immediate Post-Mortem
#ConcentricFi
2024-01-23
CertiK
Concentric.Fi Incident Analysis
#ConcentricFi
2024-01-23
Ahnlab
Lazarus Group Uses the DLL Side-Loading Technique (2)
#LazarLoader
2024-01-23
NSHC
Monthly Threat Actor Group Intelligence Report, November 2023 (ENG)
#Trend #SectorA
2024-01-22
SentinelOne
ScarCruft | Attackers Gather Strategic Intelligence and Target Cybersecurity Professionals
#LNK #ScarCruft #RokRAT
2024-01-22
NSHC
Monthly Threat Actor Group Intelligence Report, October 2023 (JPN)
#Trend #SectorA
2024-01-19
Qihoo360
APT-C-26（Lazarus）组织使用武器化的开源PDF阅读器的攻击活动分析
#APT-C-26 #SumatraPDF
2024-01-18
KRCERT
라자루스(Lazarus) 공격그룹의 특징 및 전망
#SupplyChain
2024-01-17
Sakai
Konni(코니) 에서 만든 특허 수수료 납부 확인증 위장한 악성코드-PaymentConfirmation.chm(2023.12.29)
#Konni #CHM
2024-01-17
Ahnlab
Lazarus 그룹 DLL-Side Loading 기법 이용 (2)
#LazarLoader
2024-01-16
InsaneForensics
WannaCry: Background and Detection of a Major SMB Based Ransomware Event
#Youtube #WannaCry
2024-01-16
Genians
2024년 Webinar 안내장 사칭 APT 공격 포착
#APT37 #RokRAT #LNK
2024-01-15
UNODC
Casinos and cryptocurrency: major drivers of money laundering, underground banking, and cyberfraud in East and Southeast Asia
#MoneyLaundering
2024-01-12
NSHC
Monthly Threat Actor Group Intelligence Report, September 2023 (JPN)
#Trend #SectorA
2024-01-10
Slowmist
Comprehensive Report on North Korean Hackers, Phishing Groups, and Money Laundering in 2023
#Cryptocurrency #MoneyLaundering
2024-01-10
RecordedFuture
2023 Adversary Infrastructure Report
#TAG-46 #Trend #TAG-66 #TAG-71
2024-01-08
CertiK
Post Mortem: TerraPort Finance
#Terraport
2024-01-08
Whoisxmlapi
Kimsuky: DNS Intel Gathering
#Kimsuky
2024-01-05
安恒信息
2023全球高级威胁态势研究报告
#Trend
2024-01-05
Trmlabs
North Korean Hackers Stole $600 Million in Crypto in 2023
#Cryptocurrency #OrbitBridge
2024-01-05
Phylum
Update to November’s Crypto-Themed npm Attack
#SupplyChain #NPM
2024-01-05
NSHC
Monthly Threat Actor Group Intelligence Report, October 2023 (ENG)
#Trend #SectorA
2024-01-04
KRCERT
닥터소프트 NetClient6 제품 보안 업데이트 권고
#NetClient6
2024-01-04
GregLesewich
100DaysofYARA - CosmicRust
#TA444 #CosmicRust #YARA
2024-01-04
Objective-see
Analyzing DPRK's SpectralBlur
#SpectralBlur #BlueNoroff #macOS
2024-01-04
Slowmist
Blockchain Security and AML Annual Report 2023
#Stake #Cryptocurrency #AtomicWallet #Alphapo #CoinsPaid #CoinEx #Poloniex #Harmony
2024-01-04
NSHC
Monthly Threat Actor Group Intelligence Report, November 2023 (KOR)
#Trend #SectorA
2024-01-04
Sakai
Konni(코니) 만든 북한 시장 물가 분석 문서 위장 해서 공격 하는 악성코드-주요도시 시장가격 조사 2023.xlsx(2023.12.29)
#Konni
2024-01-03
Rekt
Orbit Bridge
#OrbitBridge
2024-01-03
GregLesewich
100DaysofYARA - SpectralBlur
#KANDYKORN #TA444 #YARA #SpectralBlur
2024-01-03
Hauri
북한 해킹 조직의 스피어피싱 메일 공격 실태
#Kimsuky #Phishing
2024-01-02
OrbitChain
Orbit Chain team has developed a system for investigation support
#OrbitBridge #News
2024-01-01
PeckShield
The initial loss of @Orbit_Chain is ~$81.5M
#OrbitBridge
2024-01-01
Tay
Orbit Bridge Hack looking v methodical
#OrbitBridge
2024-01-01
Objective-see
The Mac Malware of 2023
#RustBucket #SmoothOperator #ObjCShellz #macOS #KANDYKORN #JumpCloud #JokerSpy
2024-01-01
GregLesewich
100DaysofYARA - In Memory Detection
#YARA #TA430