Tag: credential harvesting

North Korean-backed APT group Kimsuky evolves reconnaissance capabilities in recent global campaign

North Korean-backed APT group Kimsuky evolves reconnaissance capabilities in recent global campaign

Researchers from SentinelLabs have observed ongoing attacks from Kimsuky, a North Korean state-sponsored APT (advanced persistent threat) that has a long history of targeting organizations across Asia, North America, and Europe. Kimsuky has a long history of targeted attacks across…

Mandiant identifies North Korea-linked APT43 cyber operator using cybercrime to fund espionage operations

Mandiant identifies North Korea-linked APT43 cyber operator using cybercrime to fund espionage operations

Threat intelligence company Mandiant assessed Tuesday with ‘high confidence’ that APT43 is a moderately-sophisticated cyber operator that supports the interests of the North Korean regime. Campaigns attributed to APT43 include strategic intelligence collection aligned with Pyongyang’s geopolitical interests, credential harvesting,…