North Korea

30 reports

North Korea North Korea Global United States [+5] Identity Spoofing Asset Recruitment Cryptocurrency Theft Advanced Persistent Threat Operations AI-Enhanced Social Engineering

North Korean Kimsuky Group Executes $285 Million Cryptocurrency Theft Through Extended Social Engineering Campaign

DPRK Intelligence Operatives Conduct Six-Month Targeted Operation Against Drift Platform Using Sophisticated Identity Deception
North Korea North Korea United States Cyber Espionage [+1] QR Code Phishing

North Korean Kimsuky Group Deploys Malicious QR Codes in Advanced Spear-Phishing Campaign

FBI warns research institutions and government entities of mobile-focused attack bypassing email security
North Korea China Iran Russia [+6] United Kingdom Russia Cyber Espionage Influence Operations Infrastructure Attacks Parliamentary Debate Response

UK Parliament Confronts Multi-State Foreign Interference Threats to Democratic Institutions

House of Commons debate highlights Russian cyber operations, Chinese espionage, and Iranian campaigns targeting critical infrastructure
North Korea China Russia Allied Nations [+12] Global South Korea United States China Cyber Espionage Defense Procurement Fraud Social Media Monitoring Ransomware Campaigns Advanced Persistent Threat Operations Critical Infrastructure Mapping APT Collaboration Model Cryptocurrency Platform Targeting

East Asian State-Backed Cyber Groups Intensify Espionage and Ransomware Operations in 2025

Chinese state-sponsored actors lead unprecedented surge in global network infiltration and data theft campaigns
North Korea North Korea Global Ransomware Campaigns [+2] Cryptocurrency Theft Criminal Group Weaponization

North Korea Expands Cryptocurrency Theft Operations for Military Funding

DIA assessment documents broadened criminal enterprises including ransomware and hacking-for-hire activities
North Korea North Korea South Korea Cyber Espionage [+3] Identity Spoofing GitHub Command Control Cloud Trust Abuse

North Korean Hackers Exploit GitHub Infrastructure in Diplomatic Espionage Campaign

Kimsuky group targeted South Korean diplomatic missions using cloud platforms for command and control operations
North Korea North Korea Various Cyber Espionage [+2] Data Breach Publication Intelligence Exposure

Hackers Expose North Korean Kimsuky Group's Internal Operations and Chinese Collaboration

Security researchers breach Pyongyang cyber unit's workstation, revealing espionage tools and cross-border intelligence sharing
North Korea North Korea United States Western Europe [+3] Cyber Espionage Vulnerability Scanning Advanced Persistent Threat Operations

North Korean Kimsuky Group Maintains Global Reconnaissance Operations Against Western Institutions

Unprecedented visibility into systematic espionage targeting reveals scope of intelligence gathering campaign
North Korea North Korea United States Cyber Espionage [+5] Economic Coercion Identity Concealment AI Profile Generation Deceptive Job Recruitment Remote Employment Infiltration

North Korean IT Workers Infiltrate US Companies Using AI-Enhanced Identity Fraud

Remote employees generate regime revenue while accessing sensitive corporate networks
North Korea North Korea South Korea United States [+4] Cyber Espionage Identity Spoofing Advanced Persistent Threat Operations QR Code Phishing

North Korean Kimsuky Group Deploys QR Code Phishing Against Western Institutions

FBI warns of sophisticated credential theft campaign targeting think tanks and government entities
North Korea North Korea Multiple Western Nations Cyber Espionage [+1] Advanced Persistent Threat Operations

Global Cyber Alliance Documents North Korean Kimsuky Reconnaissance Operations Through AIDE Network

Unprecedented visibility reveals systematic espionage targeting Western institutions
North Korea North Korea Global South Korea [+5] United States Government Infiltration Vulnerability Demonstration Advanced Persistent Threat Operations RDP Exploitation

North Korean Kimsuky Group Exploits Windows RDP Vulnerabilities in Think Tank Campaign

AhnLab identifies sophisticated attack chain targeting government organizations and research institutions
North Korea North Korea South Korea Cyber Espionage [+2] Government Infiltration GitHub Command Control

North Korean Hackers Use GitHub as Command Center in Diplomatic Espionage Campaign

Operation targeted South Korean diplomatic missions with sophisticated spear-phishing techniques
North Korea North Korea Global United Arab Emirates [+3] Malware Distribution Supply Chain Exploitation Cryptocurrency Theft

North Korean Hackers Execute Record $1.5 Billion Cryptocurrency Heist Against Bybit Exchange

Lazarus Group's sophisticated attack on Dubai-based platform marks largest crypto theft in history
North Korea China Multiple China [+4] Cyber Espionage Supply Chain Exploitation Ransomware Campaigns Cryptocurrency Theft

East Asian State-Backed Cyber Groups Intensify Espionage and Ransomware Operations in 2025

CyberProof assessment documents dual-track Chinese and North Korean cyber warfare campaigns
North Korea North Korea Australia Canada [+8] Multiple United Kingdom United States Cyber Espionage Academic Espionage Persistent Network Infiltration Advanced Persistent Threat Operations AI-Enhanced Social Engineering

North Korean Kimsuky Group Maintains Global Reconnaissance Operations Against Western Institutions Through AIDE Network

Global Cyber Alliance documents persistent espionage campaign targeting research and government organizations
North Korea China Iran Russia [+7] United States China Election Interference Disinformation Campaigns Cyber Espionage Persistent Network Infiltration Critical Infrastructure Mapping

Foreign Espionage and Interference Operations Surge to Record Levels in 2024 Security Assessment

Comprehensive analysis reveals escalating threats from China, Russia, Iran, and North Korea targeting critical infrastructure and elections
North Korea North Korea Japan Financial Cyber Theft [+2] Cryptocurrency Theft AI-Enhanced Social Engineering

FBI Attributes Record $308 Million Crypto Theft to North Korean TraderTraitor Group

Social Engineering Attack on DMM Bitcoin Marks Largest Cryptocurrency Hack of 2024
North Korea North Korea Europe Japan [+8] Multiple Western Nations South Korea United States Western Nations Cyber Espionage Academic Espionage Advanced Persistent Threat Operations Regional Intelligence Gathering

North Korean Kimsuky Group Maintains Global Reconnaissance Operations Against Western Institutions

DPRK-linked APT conducts systematic espionage campaign targeting government, academic, and research organizations across Asia-Pacific region
North Korea China Russia Bolivia [+13] Brazil Mexico Taiwan United States China Zero-Day Exploitation Persistent Network Infiltration Living-off-the-Land Exploitation Advanced Persistent Threat Operations Telecommunications Infiltration Critical Infrastructure Mapping Cloud Trust Abuse APT Collaboration Model

State-Sponsored Cyber Actors Execute Unprecedented Infrastructure Penetration Campaign in 2024

Intelligence agencies document sophisticated pre-positioning operations targeting critical systems by multiple nation-state adversaries
North Korea North Korea Asia-Pacific Region Japan [+9] South Korea United States Cyber Espionage Academic Espionage Social Media Monitoring Professional Network Recruitment Close Access Operations Intelligence Assessment Disclosure Advanced Persistent Threat Operations

North Korean Kimsuky Group Maintains Global Reconnaissance Operations Against Western Institutions

AIDE Network Analysis Reveals Distributed Infrastructure Supporting Sustained Espionage Campaign
North Korea North Korea United States Identity Spoofing [+4] Malware Distribution Cryptocurrency Theft AI-Enhanced Social Engineering Deceptive Job Recruitment

North Korean Hackers Target Cryptocurrency Firms with Advanced Social Engineering Campaigns

FBI warns of sophisticated impersonation tactics designed to steal digital assets and fund weapons programs
North Korea China Cuba Iran [+7] Russia United States Other Election Interference Disinformation Campaigns AI-Enhanced Social Engineering Telecommunications Infiltration

U.S. Intelligence Agencies Detect Record Surge in Foreign Election Interference Operations Ahead of 2024 Vote

Intelligence analysts flag unprecedented levels of potential foreign influence operations surpassing previous election cycles
North Korea North Korea South Korea Cyber Espionage [+1] Advanced Persistent Threat Operations

North Korean State Hackers Target South Korean Semiconductor Manufacturers in Coordinated Espionage Campaign

Advanced Persistent Threat Groups Compromise Two Major Chip Firms to Steal Critical Engineering Data
North Korea North Korea Global South Korea [+5] United States Cyber Espionage Cryptocurrency Theft AI Platform Breach AI-Enhanced Social Engineering

North Korean Hackers Deploy AI Tools for Enhanced Cryptocurrency Targeting

Microsoft reveals state-backed groups leveraged OpenAI models to automate phishing campaigns
North Korea North Korea South Korea United States [+2] Ransomware Campaigns Cryptocurrency Theft

North Korean Hackers Target Healthcare Systems with Cryptocurrency Ransomware Campaigns

Government agencies warn of escalating attacks against medical organizations amid broader cyber offensive
North Korea North Korea South Korea Cyber Espionage [+1] Coordinated Cyber Warfare

North Korean Cyberattacks on South Korea Surge 36% in 2023

Intelligence agencies report escalating digital warfare targeting public sector infrastructure
North Korea North Korea South Korea Cyber Espionage [+1] Communications Interception

North Korean Hackers Target South Korean Presidential Aide Before UK Visit

Breach demonstrates Pyongyang's sophisticated cyber capabilities against high-level officials
North Korea China Russia Bolivia [+9] Brazil Mexico Multiple United States China Supply Chain Exploitation Living-off-the-Land Exploitation Advanced Persistent Threat Operations Critical Infrastructure Mapping

State-Sponsored Shadow Campaigns Operation Targets 155 Countries in Massive Global Cyber Espionage Campaign During 2023

Microsoft Intelligence Documents Unprecedented Multi-Nation Infrastructure Penetration by Advanced Persistent Threat Groups
North Korea China Global Iran [+16] Multiple Multiple Nation-States Other Russia Global Israel Ukraine United States Other Cyber Espionage Infrastructure Attacks Living-off-the-Land Exploitation Criminal Group Weaponization Advanced Persistent Threat Operations Critical Infrastructure Mapping Multi-Factor Authentication Fatigue: Sustained automated campaigns targeting users with repeated authentication requests to exhaust vigilance and create unauthorized access opportunities

Microsoft Documents 1000% Surge in Nation-State Password Attacks During 2023 Global Cyber Espionage Campaign

Digital Defense Report reveals unprecedented escalation in state-sponsored cyber operations targeting authentication systems
Select an article to read