← Feed

Posts

• View post

  "Justice Department Announces Coordinated Actions to Combat North Korean Remote IT Worker Schemes Affecting More than 70 U.S. Companies" published by USJustice. #ITWorker https://www.justice.gov/opa/pr/justice-department-announces-coordinated-actions-combat-north-korean-remote-it-worker

• View post

  "North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment" published by USFBI. #ITWorker, #PiKVM, #TinyPilot, #TeamViewer https://www.ic3.gov/PSA/2026/PSA261013

• View post

  "U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance" published by CrowdStrike. #ITWorker, #FamousChollima https://www.crowdstrike.com/en-us/blog/fbi-disrupts-famous-chollima-operation-with-crowdstrike-assistance

• View post

  "Beyond IOCs: Enriching Threat Investigations with Global Network Telemetry" published by VertexProject. #ITWorker, #UNC5267 https://vertex.link/blogs/dprk-it-worker-infrastructure-hunting/

• View post

  "APT-C-55（Kimsuky）组织多路径投递攻击活动分析" published by Qihoo360. #Phishing, #APTC55, #LNK, #GitHub https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA%3D%3D&mid=2247509028&idx=1&sn=66b3cd8daa9371324409a3daab2d537c

• View post

  "September 2026 Threat Trend Report on APT Groups" published by Ahnlab. #Kimsuky, #Konni, #ContagiousInterview, #FamousChollima, #OtterCookie, #PolinRider, #VelvetCake https://asec.ahnlab.com/en/95883

• View post

  "EtherRAT phát tán qua giả mạo hỗ trợ IT trên Microsoft Teams: Smart contract Ethereum làm cơ chế phân giải C&C" published by BlueCyber. #NPM, #ContagiousInterview, #EtherHiding, #EtherRAT, #NullReceiver https://bluecyber.hashnode.dev/etherrat-malware-bootcamp2026

• View post

  "North Korea Backdoored Their VS Code. npm Kept Bringing It Back." published by tarunrd77. #DevPopper, #VSCode https://medium.com/@tarunrd77/north-korea-backdoored-their-vs-code-npm-kept-bringing-it-back-6371da5e74c4

• View post

  "SEAL weekly stats: 13-20 Oct, 2026" published by SecurityAlliance. #UNC1069, #ContagiousInterview, #PolinRider, #SINT69 https://radar.securityalliance.org/seal-weekly-stats-13-20-oct-2026

• View post

  "Operation FlashHole: Lazarus breaks security, defies control" published by Kaspersky. #CrossWebEX, #LPEClient, #Lazarus, #TOUCHSHIFT, #FlashHole, #Cubridge, #TechHub, #TouchHub, #ClientHub https://securelist.com/lazarus-operation-flashhole/121541

• View post

  "The OpenSourceMalware Show #26" published by OpenSourceMalware. #Podcast, #ContagiousInterview, #PolinRider https://opensourcemalware.com/blog/the-opensourcemalwareshow-episode26

• View post

  "Hunting Kimsuky: Multi-Language LNK Lures Delivering Persistent Backdoors" published by NextronSystems. #Kimsuky, #LNK https://github.com/NextronSystems/iocs/tree/master/reports/Hunting%20Kimsuky:%20Multi-Language%20LNK%20Lures%20Delivering%20Persistent%20Backdoors

• View post

  "북한 IT 인력, 한국기업 취업 첫 확인‥"수사 중"" published by MBC. #News, #ITWorker https://imnews.imbc.com/replay/2026/nwdesk/article/6860024_37004.html

• View post

  "Suspected DPRK Campaign staging PHP2Shell Targeting against Global PHP infrastructure" published by Cyfirma. #Lazarus, #PHP2Shell, #DPRK, #CTI https://www.cyfirma.com/research/cyfirma-threat-advisory-suspected-dprk-campaign-staging-php2shell-targeting-against-global-php-infrastructure

• View post

  "Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles" published by Wiz. #PolinRider, #Gheist https://www.wiz.io/blog/gheist-attempted-scaled-abuse-of-stolen-github-tokens-stumbles

• View post

  "SEAL weekly stats: 20-27 Oct, 2026" published by SecurityAlliance. #UNC1069, #ContagiousInterview, #SINT69 https://radar.securityalliance.org/seal-weekly-stats-20-27-oct-2026

• View post

  "ESET APT Activity Report Q2 2026–Q3 2026" published by ESET. #Trend, #Scarcruft, #Lazarus, #DeceptiveDevelopment https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q2-2026-q3-2026

• View post

  "Treasury Sanctions Facilitators of DPRK IT Worker Fraud Targeting U.S. Businesses" published by USTreasury. #Sanctions, #ITWorker, #MoneyLaundering https://home.treasury.gov/news/press-releases/sb0669

• View post

  "OFAC Sanctions North Korean IT Worker Fraud Scheme" published by Chainalysis. #Sanctions, #ITWorker, #MoneyLaundering https://www.chainalysis.com/blog/ofac-sanctions-dprk-it-worker-fraud

• View post

  "OFAC Designates Facilitators of North Korean IT Worker Schemes Targeting US Businesses" published by Trmlabs. #Sanctions, #ITWorker, #MoneyLaundering https://www.trmlabs.com/resources/blog/ofac-designates-facilitators-of-north-korean-it-worker-schemes-targeting-us-businesses

• View post

  "Chinese illicit actors laundering Bitget exploit funds for alleged DPRK attackers" published by ZachXBT. #MoneyLaundering, #Bitget https://x.com/zachxbt/status/2104528688469647700

• View post

  "PolinRider is A/B Testing its Way Past Your Detections" published by OpenSourceMalware. #GitHub, #VSCode, #PolinRider, #NullReceiver https://opensourcemalware.com/blog/polinrider-is-a-b-testing-its-way-past-your-detections

• View post

  "SEAL weekly stats: Sept. 15-22, 2026" published by SecurityAlliance. #UNC1069, #ContagiousInterview, #SINT01 https://radar.securityalliance.org/seal-weekly-stats-sept-15-22-2026

• View post

  "The DPRK’s Use of Overseas Labour to Violate and Evade UN Sanctions" published by MSMT. #Sanctions, #ITWorker, #MoneyLaundering https://msmt.info/Publications/detail/MSMT%20Report/4232

• View post

  "A Detailed Post-Mortem on the AFX Security Incident" published by AFXTrade. #DeFi, #UNC4899, #AFX https://medium.com/@AFXTrade/a-detailed-post-mortem-on-the-afx-security-incident-57d564ef812f

• View post

  "2026 Threat Hunting Report" published by CrowdStrike. #Trend, #StardustChollima, #FamousChollima https://www.crowdstrike.com/en-us/resources/reports/threat-hunting-report

• View post

  "Alert to Countries, Companies, and Other Entities Regarding North Korean IT Workers" published by USFBI. #Sanctions, #ITWorker https://www.ic3.gov/CSA/2026/260731.pdf

• View post

  "ClickFix, EtherHiding & a DPRK Wallet Trail" published by Allsecure. #ContagiousInterview, #ClickFix, #UNC5342, #EtherHiding https://www.allsecure.io/blog/clickfix-etherhiding-dprk-wallet

• View post

  "Batten Down Your Packages: Mitigation Guidance for Supply Chain Compromise" published by Google. #SupplyChain, #UNC1069, #Axios, #T1195002, #T1195001, #MidnightNeptune https://cloud.google.com/blog/topics/threat-intelligence/mitigation-guidance-for-supply-chain-compromise

• View post

  "Grupo Lazarus: Análise Completa dos hackers da Coreia do Norte" published by AscenCripto. #Cryptocurrency, #Lazarus https://ascencriptonewsletter.substack.com/p/grupo-lazarus-analise-completa-dos