2 verified briefings on North Korea. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
A North Korean hacking group is targeting developers with fake job offers and code review requests. The sophisticated phishing campaigns aim to trick technical staff into installing malware, posing a direct threat to company security.
The North Korean state-sponsored group Kimsuky is targeting South Korean military and corporate entities with new malware. The group is using a backdoor called HTTPSpy, another named HelloDoor, and is abusing Visual Studio Code Tunnels for command-and-control, demonstrating an evolution in their attack methods.