Tag: north korea
176 articles
North Korea Expands Job Fraud Into New Sectors
North Korean workers are pulling off a clever scam, tricking companies into hiring them remotely and often doing legitimate work, all while hiding their true identities. Huntress has uncovered alarming cases of this employment fraud expanding into healthcare, sales, marketing, and medical fields.
Identity Verification Exploited in Onboarding, Recovery Processes
Cyber attackers are now exploiting weaknesses in identity verification processes, targeting the moments when identities are created or re-established, and using tactics like falsifying documents and stolen credentials to gain a foothold. This shift comes as defenders have made logins more secure, with stolen credentials involved in nearly 45% of breaches.
Trump Abruptly Curtails US-South Korea Military Drills
US President Donald Trump abruptly called off joint military drills with South Korea, citing their hefty price tag and what he deemed a hostile message. The surprise move came after Trump took to Truth Social to express his concerns.
US-South Korea Alliance Must Counter North Korea's Battlefield Gains
With President Donald Trump's call to "substantially reduce" joint military exercises with South Korea, the US-South Korea alliance faces a critical juncture that could fundamentally change how the two nations prepare for future conflicts. This sudden shift comes at a particularly challenging time, with factors like cost, diplomatic tensions, and Trump's rapport with Kim Jong Un influencing the decision.
US Scales Back South Korea Military Exercise Citing Cost and Hostility Concerns
President Donald Trump announced a major cutback to US participation in a joint military exercise with South Korea, citing the hefty price tag and concerns that it sends a hostile signal to North Korea. The move comes as Trump touts his good relationship with North Korean leader Kim Jong Un.
US Scales Back South Korea Military Drills Amid Iran Spat
President Donald Trump just shook things up with a major military decision, announcing plans to scale back US participation in joint drills with South Korea - a move he justified by citing the country's long-standing protection by the US and a recent disagreement over an Iran operation. The reduced drills come courtesy of Trump's desire to cut costs and leverage his personal rapport with North Korea's Kim Jong Un.
Trump Order Exposes Rift in US-South Korea Military Alliance
In a surprise move, US President Donald Trump ordered a substantial reduction of the Ulchi Freedom Shield exercise, a joint military drill with South Korea, just hours before it was set to begin, sparking confusion and concern among allies and analysts. The abrupt decision left many wondering what would be cut and why.
Fake Remote Workers Exploit Hiring Process Gaps
Scammers are exploiting gaps in the hiring process to land remote jobs, using stolen credentials and impersonating others to get their hands on sensitive corporate information. They're taking advantage of the rise of remote work to gain access to company networks and exfiltrate proprietary data.
Lazarus Group Exploits Microsoft Zero-Day in Global Defense Sector Attacks
North Korea's notorious Lazarus Group has been exploiting a Microsoft zero-day vulnerability, CVE-2026-68820, since early June, targeting the global defense sector with alarming precision. This high-severity flaw, patched in August, allowed attackers to execute code with SYSTEM-level privileges, putting countless systems at risk.
Researchers Expose North Korean IT Hiring Ploy
Security researchers pulled off a clever experiment, creating a fake DeFi startup and hiring three suspected North Korean IT operatives to uncover the tactics used to secretly place foreign workers in companies, and were surprised to find that none exploited their access. The operatives cleared interviews, signed contracts, and were given access to a work virtual machine, but instead of breaching security, they seemed to be gathering intel.
North Korean Spies Deploy Local AI Tools to Bolster Cyber Operations
North Korean spies are taking their cyber operations to the next level by deploying local AI tools, marking a significant shift from experimentation to integration. This development enables them to enhance malware development, data analysis, and attack techniques, posing a more sophisticated threat.
Kimsuky Bolsters Phishing Arsenal with Offline AI Infrastructure
North Korean hackers Kimsuky are taking phishing to the next level by leveraging offline AI infrastructure, a deliberate move to supercharge their espionage capabilities. Genians, a South Korean security firm, uncovered evidence of language-model tools like Ollama and GPT4All being installed and run on Kimsuky's servers.
North Korea Escalates Ballistic Missile Support for Russia Amid Ukraine Crisis
Ukraine's air defenses scored a major win against drones, downing 98 out of 115, but were left vulnerable to ballistic missiles, which slipped through completely unscathed. Meanwhile, a North Korean missile unit may soon join forces with Russia in the Voronezh region, potentially bringing 120 short-range ballistic missiles into the fray.
Cyberattacks Surge 89% as AI Becomes Dual Threat
The threat landscape is evolving at an alarming rate: AI is now being wielded as a powerful tool by cyberattackers, with a staggering 89% surge in AI-enabled attacks. This dual threat - where AI is both the weapon and the target - has adversaries leveraging AI agents at 2.5 times the rate of human-triggered threats.
North Korea's Naval Buildup Complicates Allied Planning in Indo-Pacific
North Korea's rapidly advancing naval capabilities are raising eyebrows among allied planners in the Indo-Pacific, with a focus on complicating and consuming their attention rather than engaging in a traditional blue-water war. At the forefront is the 5,000-tonne Choe Hyon-class destroyer series, unveiled in 2024, touted as a multi-role powerhouse with advanced anti-air, anti-ship, and land-attack capabilities.
AWS Tracks North Korean Group in npm Supply Chain Attacks
AWS has uncovered a string of sneaky supply-chain attacks on popular npm libraries, and their threat intel team is pointing to a notorious North Korean group, known as Saphire Sleet, as the likely culprit. The attacks hit big-name libraries like axios, debug, and chalk, raising concerns about the security of the software supply chain.
Amazon Ties npm Hijack to North Korea's Sapphire Sleet
In a shocking supply-chain hijack, North Korea's Sapphire Sleet group compromised over 2 billion weekly downloads of popular npm packages, including debug and chalk, in a brazen attack tied to multiple other malicious campaigns. Amazon Threat Intelligence has linked this September 2025 incident to a string of attacks dating back to March 2025.
North Korea Targets Low-Profile Packages in Warm-Up for Axios Hack
Amazon's chief information security officer CJ Moses reveals that a March 2025 crypto campaign was likely a rehearsal for a more significant attack, specifically targeting low-profile packages. This campaign was linked to a notorious hacking group also responsible for the recent axios library compromise.
BlueNoroff Phishing Kit Targets Crypto Wallets with Zoom Lures
BlueNoroff's phishing kit is a masterclass in deception, using Zoom lures and compromised industry contacts to trick victims into divulging their crypto wallet info. This sophisticated scam combines social engineering and malware to selectively target high-value victims.
North Korea's IT worker scheme fuels Russia's war effort
A shocking new report reveals that North Korea's IT worker scheme is secretly fueling Russia's war effort, with funds routed through a complex network to support multiple state objectives. The surprising twist: it's not just about North Korea's own weapons program, but also about arming Russia's military.
Russia Weighs Intelligence Sharing with North Korea Over Satellite Tech Transfer
North Korea's recent launch of the Malligyong-1 satellite marks a significant tech milestone, but the real challenge lies ahead: developing a network of coordinated satellites to monitor the Korean Peninsula and US military hubs in the Western Pacific. A single satellite just isn't enough for effective surveillance.
North Korea Unveils Heavily Armed Frigate With Unusual Machine Gun Array
Witness the awe-inspiring display of North Korea's military might as the Kang Kon frigate unleashes a barrage of 12 strategic cruise missiles and a dizzying array of heavy machine guns. Kim Jong Un personally oversaw the impressive multi-system sea trial, showcasing the vessel's cutting-edge capabilities.
North Korea-Linked npm Packages Target Developers with Stealthy Data Theft
Malicious npm packages, linked to North Korean threat actors, are impersonating popular tools to trick developers into handing over sensitive data. These sneaky packages masquerade as legitimate polyfill tools, making them hard to spot during a quick review.
North Korea Unveils Choe Hyon-class Destroyer Amid Naval Nuclearisation Push
North Korea has just unveiled its most powerful warship yet, the Choe Hyon-class destroyer, marking a major milestone in its naval modernisation efforts. This massive 145-metre-long vessel is a game-changer for the Korean People's Army Navy.