Socket has identified a new malware loader called XORIndex incorporated into malicious packages published to the npm registry ...

North Korean threat actors planted 67 malicious packages in the Node Package Manager (npm) online repository to deliver a new ...

North Korean hackers continue attacking open-source software via npm packages. 67 new malicious packages with XORIndex Loader ...

Uploading malicious code to npm is just a setup. The real attack most likely happens elsewhere - on LinkedIn, Telegram, or ...

North Korean officials accused the US Department of Justice (DOJ) of running “an absurd smear campaign” after announcing that ...

Federal authorities uncover North Korean schemes using remote IT workers with false identities to defraud U.S. companies, ...

The IT worker scheme, also tracked as Nickel Tapestry, Wagemole, and UNC5267, involves North Korean actors using a mix of ...

Researchers warn that recent attack campaigns against Web3 and crypto startups by a North Korean APT group have leveraged a ...

North Korean hackers are using Nim-compiled malware called “NimDoor” to target crypto companies on macOS, exploiting fake ...

Korea Songkwang Trading General Corporation received designation under Executive Order 13810 as North Korean persons. Korea Saenal Trading Corporation also faces sanctions for engaging in commercial ...

North Korea-linked hackers have deployed NimDoor, a new Apple malware targeting crypto firms, complicating detection and ...

Threat actors are using social engineering to impersonate trusted contacts and convince targets to install persistent malware ...