North Korean Hackers Indicted
On Wednesday 17 February, the Department of Justice unsealed a federal indictment wherein three North Korean hackers were indicted for
Read More
SAMJOKO
Current Events and Analysis
Cyber
News and analysis relevant to the cybersecurity domain.
Probable DPRK Nexus Actors Targeting Security Researchers
Yesterday, Google’s Threat Analysis Group (TAG) published a blog post identifying an ongoing campaign targeting security researchers working on vulnerability
Read More
DPRK, TrickBot, and Russian Cyber Threat Actors
Multiple sources have reported on possible links between DPRK threat actors and Trickbot, which is operated by Russian actors. Moreover,
Read More
New DPRK Malware Analysis Reports
CISA, FBI, and DOD released three new DPRK Malware Analysis Reports yesterday, and uploaded samples to VirusTotal. These joint reports
Read More
Threat Actors use Slack for C2
Threat actors used Slack — an IRC style chatting system comprised of workspaces and channels — and GitHub to gather
Read More
New Lazarus Group Malware Identified: HOPLIGHT
US-CERT recently released a Malware Analysis Report (MAR) identifying a new strain of malware (HOPLIGHT) attributed to the Lazarus Group
Read More
DPRK Sanctions and Cyber Attacks
In March I wrote about a DPRK threat actor targeting a US-based university and US-based think tank involved in DPRK
Read More
North Korean Cyber Threat Actors
Prior to the announcement of the most recent Trump-Kim “nuclear” summit, Vice President Mike Pence met with Kim Yong Chol
Read More
DPRK Threat Actor Targets US Think Tanks
Palo Alto Networks Unit 42 reported a spear-phishing campaign targeting a US-based university and a US-based think tank. The threat
Read More