Latest North Korea news

North Korean Hackers Used Hermes Ransomware to Hide Recent Bank Heist

Evidence suggests the infamous Lazarus Group, a hacking crew believed to be operating out of North Korea, is behind the recent hack on the Far Eastern International Bank (FEIB) in Taiwan.
- Catalin Cimpanu
- October 17, 2017
- 07:50 AM
- 1
Hackers Hijack Ongoing Email Conversations to Insert Malicious Documents

A group of hackers is using a sophisticated technique of hijacking ongoing email conversations to insert malicious documents that appear to be coming from a legitimate source and infect other targets participating in the same conversational thread.
- Catalin Cimpanu
- October 06, 2017
- 05:13 AM
- 1
North Korean Cyberspies Target US Defense Contractors Following Nuclear Threats

The North Korean cyber-espionage group known as the Lazarus Group has been busy hacking US defense contractors, according to a report published on Monday by security research firm Palo Alto Networks.
- Catalin Cimpanu
- August 16, 2017
- 04:55 PM
- 2
New Version of DarkHotel Malware Spotted Going After Political Figures

The DarkHotel hacking group, a threat actor known to engage in advanced cyber-espionage tactics, has shifted operations from targeting CEOs and businessmen to political figures.
- Catalin Cimpanu
- July 21, 2017
- 07:03 PM
- 0
DHS and FBI Publish Details on DeltaCharlie, North Korea's DDoS Botnet

In a US-CERT report released yesterday afternoon, the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have published IOCs about a malware family known as DeltaCharlie, used by North Korea to create its private DDoS botnet.
- Catalin Cimpanu
- June 14, 2017
- 04:55 AM
- 1
New Evidence Cements Theory That North Korea is Behind Lazarus Group

A 53-page report released today by Group-IB, a Russian cyber-security vendor, contains new evidence that cements the theory that the North Korean government is behind the Lazarus Group, a cyber-espionage outfit.
- Catalin Cimpanu
- May 30, 2017
- 02:00 PM
- 0
The Week in Ransomware - May 26th 2017 - AES-NI, Jaff, & Decryptors

This week was a busy with lots of little variants discussed below and a new version of the Jaff Ransomware circulating via MALSPAM. The big news is that AES-NI decided to close shop and has starting releasing the master decryption keys so people can get their files back for free.
- Lawrence Abrams
- May 26, 2017
- 06:04 PM
- 0
North Korea Denies Involvement in WannaCry Ransomware Outbreak

On Friday, North Korea denied allegations that it was somehow responsible for the WannaCry ransomware outbreak that affected over 240,000 computers in nearly 200 countries across the globe.
- Catalin Cimpanu
- May 22, 2017
- 02:10 PM
- 0
3 Security Firms Say WannaCry Ransomware Shares Code with North Korean Malware

While initially, we thought this would be a silly and unsubstantiated discovery, the number of security firms claiming they've identified and confirmed connections between the WannaCry ransomware and malware used by the Lazarus Group has now gone up to three.
- Catalin Cimpanu
- May 17, 2017
- 06:50 AM
- 7
Malware Targets North Korea for Once

Security researchers from Cisco Talos have come across a new malware family that was used to target various officials and organizations linked to North Korea.
- Catalin Cimpanu
- May 04, 2017
- 06:07 AM
- 0
Malware Used to Attack Polish Banks Contained False Flags Blaming Russian Hackers

Malware samples used in the recent attacks against several Polish banks contained planted evidence that attempted to blame the attacks on Russian-speaking hackers.
- Catalin Cimpanu
- February 20, 2017
- 09:37 AM
- 1