Sign in Subscribe

North Korea

Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors

Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors

On September 18, 2024, Unit 42 researchers at Palo Alto Networks released an investigation detailing an ongoing cyber campaign by the North Korean-linked threat actor group known as Gleaming Pisces (aka Citrine Sleet).

Cyber Espionage and Financial Threats Targeting Mexico

Cyber Espionage and Financial Threats Targeting Mexico

Mandiant and Google’s Threat Analysis Group (TAG) released a joint report providing critical insights into the cyber threat landscape impacting Mexico. This report uncovers the ongoing cyber espionage operations and financially motivated cyber attacks aimed at Mexican users and enterprises.

North Korean Cyber Threat Groups Unleash New Malware Arsenal in 2024

North Korean Cyber Threat Groups Unleash New Malware Arsenal in 2024

On September 9, 2024, Palo Alto Networks' Unit 42 released a detailed threat assessment outlining the activities of various North Korean cyber threat groups operating under the Reconnaissance General Bureau (RGB).

North Korean Threat Actor Citrine Sleet Exploits Chromium Zero-Day Vulnerability

North Korean Threat Actor Citrine Sleet Exploits Chromium Zero-Day Vulnerability

Citrine Sleet, a North Korean threat actor tracked by Microsoft, has been involved in various cyber operations targeting the financial sector. The group is notorious for its sophisticated social engineering tactics

TodoSwift Malware Disguised as Bitcoin PDF: North Korea’s BlueNoroff Threat Actor Group Strikes Again

TodoSwift Malware Disguised as Bitcoin PDF: North Korea’s BlueNoroff Threat Actor Group Strikes Again

On August 16, 2024, Kandji released a technical report on a new macOS malware named "TodoSwift," believed to be connected to the North Korean threat actor group BlueNoroff.