News

North Korean XORIndex malware hidden in 67 malicious npm packages
North Korean threat actors planted 67 malicious packages in the Node Package Manager (npm) online repository to deliver a new ...
Infosecurity Magazine10h
North Korean Actors Expand Contagious Interview Campaign with New Malware Loader
Socket has identified a new malware loader called XORIndex incorporated into malicious packages published to the npm registry ...
The Hacker News11h
North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign
North Korean hackers continue attacking open-source software via npm packages. 67 new malicious packages with XORIndex Loader ...
North Korean hackers release malware-ridden packages into npm registry
Uploading malicious code to npm is just a setup. The real attack most likely happens elsewhere - on LinkedIn, Telegram, or Discord. North Korean attackers would pose as recruiters, or HR managers in ...
U.S. sanctions North Korean hacker for crimes benefitting Kim Jong Un's arms programs
The federal government has sanctioned alleged North Korean hacker Song Kum Hyok for illegal activities related to his ...
North Korea lashes out after Trump DOJ exposes massive IT infiltration scheme
US Department of Justice uncovers North Korean IT workers using false identities to infiltrate American companies, including ...
The Hacker News5d
U.S. Sanctions North Korean Andariel Hacker Behind Fraudulent IT Worker Scheme
The IT worker scheme, also tracked as Nickel Tapestry, Wagemole, and UNC5267, involves North Korean actors using a mix of ...
CSO Online12d
North Korean crypto thieves deploy custom Mac backdoor
Researchers warn that recent attack campaigns against Web3 and crypto startups by a North Korean APT group have leveraged a ...
US sanctions North Korean tech worker crew over crypto thefts
The US Treasury has sanctioned four Russian entities and two alleged facilitators of a North Korean IT worker ring that ...
Microsoft Warns Of Remote North Korean IT Workers Hacking Organizations To Milk Money For Regime; Here’s How
Since 2024, Microsoft Threat Intelligence has observed remote IT workers deployed by North Korea leveraging AI to improve the ...
U.S. sanctions North Korean member of Kim Jong Un's spy agency over IT worker scheme
Song Kum Hyok is accused of masterminding a scheme in which North Korean cyber operatives posed as U.S. remote IT workers for ...
North Korean hackers targeting crypto projects with unusual Mac exploit
North Korean hackers are using Nim-compiled malware called “NimDoor” to target crypto companies on macOS, exploiting fake ...