Tag: Korea

The Updated APT Playbook: Tales from the Kimsuky threat actor group

Posted on

Rapit7 team recently ran across some interesting activity that they believe is the work of the Kimsuky threat actor group, also known as Black Banshee or Thallium. Originating from North Korea and active since at least 2012, Kimsuky focuses primarily on Read More …

North Korea Using Social Engineering to Enable Hacking of Think Tanks, Academia, and Media

Posted on

The Federal Bureau of Investigation (FBI), the U.S. Department of State, and the National Security Agency (NSA), together with the Republic of Korea’s National Intelligence Service (NIS), National Police Agency (NPA), and Ministry of Foreign Affairs (MOFA), are jointly issuing Read More …

FakeSpy Android Information-Stealing Malware Targets Japanese and Korean-Speaking Users

Posted on

Spoofing legitimate mobile applications is a common cybercriminal modus that banks on their popularity and relies on their users’ trust to steal information or deliver payloads. Cybercriminals typically use third-party app marketplaces to distribute their malicious apps, but in operations Read More …

Lazarus Group used ActiveX zero-day vulnerability to attack South Korean security think tank

Posted on

An ActiveX zero-day vulnerability used in attacks against a South Korean think tank has been connected to Lazarus Group. The target of these attacks was the Sejong Institute, a non-profit South Korean think tank which conducts research on national security. Read More …

Researchers Find New Twists In ‘Olympic Destroyer’ Malware

Posted on

Researchers have uncovered new wrinkles in the “Olympic Destroyer” malware attack that targeted the Winter Olympics in Pyeongchang, South Korea. Cisco Talos researchers now believe the malware also wipes files on shared network drives. Originally researchers believed the malware only targeted single Read More …