Tag: north korea
190 articles
North Korea's Hero Kim Kun Ok Submarine Conducts Missile Tests at Sea
North Korea's latest at-sea missile tests are a bold statement of its military ambitions, with leader Kim Jong Un vowing to arm the Navy with nuclear weapons as soon as possible. The tests, conducted by the Hero Kim Kun Ok submarine, showcased Pyongyang's growing underwater combat capabilities.
US, South Korea Weigh Wartime Control Transition
As the US and South Korea consider a historic transition of wartime control, a critical decision looms for the two commanders-in-chief: what level of support will the US provide if South Korea takes the lead in deterring North Korea? The 2026 US National Defense Strategy hints at a limited but crucial role for the US in this new era.
US Charges 14 in North Korean Remote Work Scheme Crackdown
The US Justice Department has cracked down on a massive remote-work scheme benefiting North Korea, charging 14 people and seizing nearly 200 computers in a nationwide operation. This sweeping move, dubbed Operation Lonestar Roundup, goes far beyond fraud, aiming to dismantle a sprawling network of "laptop farms" used to allegedly funnel profits to the reclusive regime.
FBI Disrupts North Korean IT Worker Schemes, Arrests US Nationals
In a major crackdown, the FBI swooped in on a North Korean remote IT worker network in Texas, seizing nearly 187 laptops in a multi-day operation dubbed the "Lonestar Roundup." This bold move marks the beginning of a broader effort to dismantle the notorious Famous Chollima threat group's US infrastructure.
US Water Systems Face Growing Cyber Threats
US water systems are under siege by cyber threats from hostile nations like China, Russia, Iran, and North Korea, as well as ransomware groups, putting our critical infrastructure at risk of a nationwide public-health crisis. This summer's alarming attacks on water systems in 12 states by Iranian hackers exposed the vulnerability of our water infrastructure to foreign adversaries.
North Korea Targets Bitget in $387.5M Crypto Heist
North Korean hackers pulled off a brazen $387.5 million crypto heist by infiltrating a key backend system of Bitget, a leading crypto exchange, and exploiting it to siphon off digital assets. The attack, bearing all the hallmarks of a sophisticated North Korean operation, left Bitget's cold wallets and customer balances remarkably unscathed.
North Korea Advances Hwasong-11Ma Hypersonic Missile with New Test
North Korea has taken a major leap forward with its Hwasong-11Ma hypersonic missile, successfully testing the advanced weapon in a launch witnessed by Kim Jong Un and his daughter Kim Ju Ae. The test, which took place on September 20, saw the missile soar to an altitude of 35.8 kilometers and travel an impressive distance, according to North Korean state media.
North Korea Targets 30,000 Devices in Global Crypto Heist
North Korean hackers have launched a massive global crypto heist, compromising over 30,000 devices in more than 100 countries and stealing at least $10.71 million in cryptocurrency. This staggering cybercrime spree has been uncovered by a joint advisory from top cybersecurity agencies worldwide.
Jade Sleet Targets Indian IT Provider with FLATROOF and ROOFDECK Backdoors
North Korean-aligned threat actor Jade Sleet has launched a targeted attack on an Indian IT provider, using FLATROOF and ROOFDECK backdoors to gain long-term access to high-value targets by exploiting developer workflows and supply-chain tooling. The attack, detected as early as March 18, 2026, is part of a persistent campaign that highlights the group's evolving tactics.
North Korea Exploits Job Seekers to Infect 30,000 Devices
North Korean hackers have compromised over 30,000 devices by posing as recruiters, targeting unsuspecting job seekers with a clever ruse that steals sensitive information and cryptocurrency. By exploiting stolen IDs, these cybercriminals can impersonate victims and generate foreign currency, ultimately funding the regime.
North Korea turbocharges cybercrime with AI-driven operations
North Korean hackers have turbocharged their cybercrime operations with AI-driven tactics, swiping a staggering $643 million in cryptocurrency in just the first half of 2026 - a whopping 66% of global crypto theft.
US-South Korea Alliance Targets North Korea with Dark Eagle Hypersonic Weapon
Meet the game-changing Dark Eagle hypersonic weapon, capable of flying over 3,500 kilometers at Mach 15 speeds, revolutionizing deterrence on the Korean Peninsula. This powerhouse is the crown jewel of the US-South Korea alliance's Multi-Domain Task Force.
North Korea's Lazarus Fractures into Six Cyber Clusters
Meet the six distinct cyber clusters that now make up North Korea's notorious Lazarus group, each with its own unique tactics and targets. A single cryptocurrency theft of $62.5m highlights the alarming intersection of crime, statecraft, and corporate infiltration.
North Korea's Ted Backdoor Infiltrates HAProxy Builds to Intercept Web Traffic
Security researchers have uncovered a sneaky backdoor, dubbed "ted", hidden in HAProxy builds used by two South Korean companies, allowing hackers to intercept web traffic. This cleverly concealed Linux toolkit was deployed through a trojanized HAProxy load balancer, highlighting the need for extra vigilance in cybersecurity.
North Korea Expands Job Fraud Into New Sectors
North Korean workers are pulling off a clever scam, tricking companies into hiring them remotely and often doing legitimate work, all while hiding their true identities. Huntress has uncovered alarming cases of this employment fraud expanding into healthcare, sales, marketing, and medical fields.
Identity Verification Exploited in Onboarding, Recovery Processes
Cyber attackers are now exploiting weaknesses in identity verification processes, targeting the moments when identities are created or re-established, and using tactics like falsifying documents and stolen credentials to gain a foothold. This shift comes as defenders have made logins more secure, with stolen credentials involved in nearly 45% of breaches.
Trump Abruptly Curtails US-South Korea Military Drills
US President Donald Trump abruptly called off joint military drills with South Korea, citing their hefty price tag and what he deemed a hostile message. The surprise move came after Trump took to Truth Social to express his concerns.
US-South Korea Alliance Must Counter North Korea's Battlefield Gains
With President Donald Trump's call to "substantially reduce" joint military exercises with South Korea, the US-South Korea alliance faces a critical juncture that could fundamentally change how the two nations prepare for future conflicts. This sudden shift comes at a particularly challenging time, with factors like cost, diplomatic tensions, and Trump's rapport with Kim Jong Un influencing the decision.
US Scales Back South Korea Military Exercise Citing Cost and Hostility Concerns
President Donald Trump announced a major cutback to US participation in a joint military exercise with South Korea, citing the hefty price tag and concerns that it sends a hostile signal to North Korea. The move comes as Trump touts his good relationship with North Korean leader Kim Jong Un.
US Scales Back South Korea Military Drills Amid Iran Spat
President Donald Trump just shook things up with a major military decision, announcing plans to scale back US participation in joint drills with South Korea - a move he justified by citing the country's long-standing protection by the US and a recent disagreement over an Iran operation. The reduced drills come courtesy of Trump's desire to cut costs and leverage his personal rapport with North Korea's Kim Jong Un.
Trump Order Exposes Rift in US-South Korea Military Alliance
In a surprise move, US President Donald Trump ordered a substantial reduction of the Ulchi Freedom Shield exercise, a joint military drill with South Korea, just hours before it was set to begin, sparking confusion and concern among allies and analysts. The abrupt decision left many wondering what would be cut and why.
Fake Remote Workers Exploit Hiring Process Gaps
Scammers are exploiting gaps in the hiring process to land remote jobs, using stolen credentials and impersonating others to get their hands on sensitive corporate information. They're taking advantage of the rise of remote work to gain access to company networks and exfiltrate proprietary data.
Lazarus Group Exploits Microsoft Zero-Day in Global Defense Sector Attacks
North Korea's notorious Lazarus Group has been exploiting a Microsoft zero-day vulnerability, CVE-2026-68820, since early June, targeting the global defense sector with alarming precision. This high-severity flaw, patched in August, allowed attackers to execute code with SYSTEM-level privileges, putting countless systems at risk.
Researchers Expose North Korean IT Hiring Ploy
Security researchers pulled off a clever experiment, creating a fake DeFi startup and hiring three suspected North Korean IT operatives to uncover the tactics used to secretly place foreign workers in companies, and were surprised to find that none exploited their access. The operatives cleared interviews, signed contracts, and were given access to a work virtual machine, but instead of breaching security, they seemed to be gathering intel.