North Korean Hacking Archives

vulnerabilities, root cause, Microsoft Storm-1152 fake accounts CaaS

Attackers Worldwide are Zeroing In on React2Shell Vulnerability

Jeffrey Burt | December 11, 2025 | Backdoor malware, bitsight, China-linked Hackers, Huntress cybersecurity findings, malicious cryptomining, Mirai botnet, Next.js vulnerability, North Korean Hacking, Palo Alto Networks Unit 42, React security flaw, React2Shell Vulnerability

Bad actors that include nation-state groups to financially-motivated cybercriminals from across the globe are targeting the maximum-severity but easily exploitable React2Shell flaw, with threat researchers see everything from probes and backdoors to ...

Security Boulevard

North Korea’s Lazarus Group Hacks Bybit, Steals $1.5 Billion in Crypto

Jeffrey Burt | February 22, 2025 | cryptocurrency exchange hack, ether, Lazarus Group, North Korean Hacking

North Korea's notorious Lazarus Group reportedly stole $1.5 billion in cryptocurrency from the Bybit exchange in what is being called the largest hack in the controversial market's history. It came the same ...

Security Boulevard

cryptocurrency ransomware DOJ seize Lazarus

DOJ Wants to Claw Back $2.67 Million Stolen by Lazarus Group

Jeffrey Burt | October 7, 2024 | cryptocurrency asset theft, Department of Justice (DOJ), Lazarus Group, North Korean Hacking

The DOJ wants to seize $2.67 million from the $69 million in crypto the North Korean-backed Lazarus Group stole in from the options exchange Deribit in 2022 and online gambling platform Stake.com ...

Security Boulevard

North Korean Group Uses Fake Job Offers to Target Energy, Aerospace Sectors

Jeffrey Burt | September 18, 2024 | google, IT worker scam, Mandiant, North Korean Hacking

The North Korean-backed threat group UNC2970 is using spearphishing emails and WhatsApp messages to entice high-level executives in the energy and aerospace sectors to open a malicious ZIP file containing a fake ...

Security Boulevard

WTH? DPRK WFH Ransomware Redux: 3rd Person Charged

Richi Jennings | August 13, 2024 | Andrew M., DPRK, Korea, Korean military, Korean ransomware, Matthew Isaac Knoot, North Korea, North Korean Hacking, North Korean Threat Actors, northkorea, Noth Korea, SB Blogwatch

North Korean army of remote IT workers enabled by Matthew Isaac Knoot, alleges DoJ ...

Security Boulevard

DOJ Shuts Down Another North Korean ‘Laptop Farm’

Jeffrey Burt | August 12, 2024 | Department of Justice (DOJ), fake IT worker scam, North Korean Hacking

The DOJ shut down another "laptop farm" link to a North Korean fake IT worker scam that the country uses to illegally bring in money for its nuclear and ballistic weapons program ...

Security Boulevard

U.S., Korea, North Korea cyberespionage nuclear weapons

Suspect Indicted in North Korea Group’s Expansive Spying Operation

Jeffrey Burt | July 26, 2024 | APT45, cyberespionage, North Korean Hacking, Ransomware

North Korea's APT45 threat group is using ransomware attacks on U.S. health care firms to fund an ongoing cyberespionage campaign to steal military and defense secrets that are fed back into the ...

Security Boulevard

payroll, systems, North Korea IT worker scam

KnowBe4 Unknowingly Hired Fake North Korean IT Worker

Jeffrey Burt | July 24, 2024 | IT worker scam, KnowBe4, North Korean Hacking

Cybersecurity company KnowBe4 unknowingly hired a North Korean operative who used a stolen identity and an AI-enhanced photo to get the software engineer job and then immediately began loading malware into the ...

Security Boulevard

North Korea IT Worker Scam Brings Malware and Funds Nukes

Richi Jennings | May 17, 2024 | DPRK, Korea, Korean military, Korean ransomware, North Korea, North Korean Hacking, North Korean Threat Actors, northkorea, Noth Korea, SB Blogwatch

WTH? DPRK IT WFH: Justice Department says N. Korean hackers are getting remote IT jobs, posing as Americans ...

Security Boulevard

Backdoors and Miners Amid eScan Antivirus Backdoor Exploit

Wajahat Raja | May 10, 2024 | Antivirus software, Backdoor Exploit, cryptocurrency mining, cyber attacks, Cybersecurity, Cybersecurity News, Defense Sector, eScan Antivirus, Exploit Detection, GuptiMiner, Malware, Network Security, North Korean Hacking, security updates, Threat Intelligence, Vulnerabilities

Recently, a wave of malware attacks has surfaced, exploiting vulnerabilities in the update mechanism of the eScan antivirus software. This eScan antivirus backdoor exploit distributes backdoors and cryptocurrency miners, such as XMRig, ...

TuxCare

North Korean Hacking

Senator Sanders Wants to Own AI Companies — and Hand America’s Adversaries the Keys

NIST’s Nine: The PQC Signature Race Moves to Round Three

The Quantum Arms Race: Why Washington Just Wrote a $2 Billion Check to Nine Companies

Beyond Moore’s Law: The Hyper-Acceleration of Autonomous AI Cyber Capabilities

The Exception Economy: When Security Teams Stop Protecting and Start Negotiating

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On