Tag: north korea
190 articles
North Korean Spies Deploy Local AI Tools to Bolster Cyber Operations
North Korean spies are taking their cyber operations to the next level by deploying local AI tools, marking a significant shift from experimentation to integration. This development enables them to enhance malware development, data analysis, and attack techniques, posing a more sophisticated threat.
Kimsuky Bolsters Phishing Arsenal with Offline AI Infrastructure
North Korean hackers Kimsuky are taking phishing to the next level by leveraging offline AI infrastructure, a deliberate move to supercharge their espionage capabilities. Genians, a South Korean security firm, uncovered evidence of language-model tools like Ollama and GPT4All being installed and run on Kimsuky's servers.
North Korea Escalates Ballistic Missile Support for Russia Amid Ukraine Crisis
Ukraine's air defenses scored a major win against drones, downing 98 out of 115, but were left vulnerable to ballistic missiles, which slipped through completely unscathed. Meanwhile, a North Korean missile unit may soon join forces with Russia in the Voronezh region, potentially bringing 120 short-range ballistic missiles into the fray.
Cyberattacks Surge 89% as AI Becomes Dual Threat
The threat landscape is evolving at an alarming rate: AI is now being wielded as a powerful tool by cyberattackers, with a staggering 89% surge in AI-enabled attacks. This dual threat - where AI is both the weapon and the target - has adversaries leveraging AI agents at 2.5 times the rate of human-triggered threats.
North Korea's Naval Buildup Complicates Allied Planning in Indo-Pacific
North Korea's rapidly advancing naval capabilities are raising eyebrows among allied planners in the Indo-Pacific, with a focus on complicating and consuming their attention rather than engaging in a traditional blue-water war. At the forefront is the 5,000-tonne Choe Hyon-class destroyer series, unveiled in 2024, touted as a multi-role powerhouse with advanced anti-air, anti-ship, and land-attack capabilities.
AWS Tracks North Korean Group in npm Supply Chain Attacks
AWS has uncovered a string of sneaky supply-chain attacks on popular npm libraries, and their threat intel team is pointing to a notorious North Korean group, known as Saphire Sleet, as the likely culprit. The attacks hit big-name libraries like axios, debug, and chalk, raising concerns about the security of the software supply chain.
Amazon Ties npm Hijack to North Korea's Sapphire Sleet
In a shocking supply-chain hijack, North Korea's Sapphire Sleet group compromised over 2 billion weekly downloads of popular npm packages, including debug and chalk, in a brazen attack tied to multiple other malicious campaigns. Amazon Threat Intelligence has linked this September 2025 incident to a string of attacks dating back to March 2025.
North Korea Targets Low-Profile Packages in Warm-Up for Axios Hack
Amazon's chief information security officer CJ Moses reveals that a March 2025 crypto campaign was likely a rehearsal for a more significant attack, specifically targeting low-profile packages. This campaign was linked to a notorious hacking group also responsible for the recent axios library compromise.
BlueNoroff Phishing Kit Targets Crypto Wallets with Zoom Lures
BlueNoroff's phishing kit is a masterclass in deception, using Zoom lures and compromised industry contacts to trick victims into divulging their crypto wallet info. This sophisticated scam combines social engineering and malware to selectively target high-value victims.
North Korea's IT worker scheme fuels Russia's war effort
A shocking new report reveals that North Korea's IT worker scheme is secretly fueling Russia's war effort, with funds routed through a complex network to support multiple state objectives. The surprising twist: it's not just about North Korea's own weapons program, but also about arming Russia's military.
Russia Weighs Intelligence Sharing with North Korea Over Satellite Tech Transfer
North Korea's recent launch of the Malligyong-1 satellite marks a significant tech milestone, but the real challenge lies ahead: developing a network of coordinated satellites to monitor the Korean Peninsula and US military hubs in the Western Pacific. A single satellite just isn't enough for effective surveillance.
North Korea Unveils Heavily Armed Frigate With Unusual Machine Gun Array
Witness the awe-inspiring display of North Korea's military might as the Kang Kon frigate unleashes a barrage of 12 strategic cruise missiles and a dizzying array of heavy machine guns. Kim Jong Un personally oversaw the impressive multi-system sea trial, showcasing the vessel's cutting-edge capabilities.
North Korea-Linked npm Packages Target Developers with Stealthy Data Theft
Malicious npm packages, linked to North Korean threat actors, are impersonating popular tools to trick developers into handing over sensitive data. These sneaky packages masquerade as legitimate polyfill tools, making them hard to spot during a quick review.
North Korea Unveils Choe Hyon-class Destroyer Amid Naval Nuclearisation Push
North Korea has just unveiled its most powerful warship yet, the Choe Hyon-class destroyer, marking a major milestone in its naval modernisation efforts. This massive 145-metre-long vessel is a game-changer for the Korean People's Army Navy.
macOS Malware Embeds Fake Errors to Evade AI Analysis
Meet macOS.Gaslight, a sneaky new malware family from a North Korean-linked threat actor that's got a clever trick up its sleeve - embedding 38 fake system messages to throw off AI analysis tools. This tiny 3.5 KB payload is packed with deception, making it a formidable foe for cybersecurity experts.
Gaslight Malware Exposes AI-Assisted Analysis Limits
Meet Gaslight, a sneaky new macOS malware that uses fake system-failure messages to trick AI-powered analysis tools into doubting themselves. Created by North Korea-aligned threat actors, this Rust-based implant is a clever and concerning threat to cybersecurity.
North Korea-linked Backdoor Exploits AI Triage Tools
When building AI triage tools, it's crucial to treat sample contents as potentially hostile input, not instructions, to prevent malicious manipulation. Experts warn that failing to do so can allow attackers to sneak hostile content into your model.
Microsoft Links North Korea to Mastra AI Supply Chain Compromise
Microsoft has uncovered a massive supply chain attack on the npm registry, where over 140 packages were compromised, and has linked the operation with high confidence to Sapphire Sleet, a notorious North Korean state actor known for targeting the financial sector. This large-scale attack highlights the growing threat of North Korean hacking groups.
ScarCruft Targets Microsoft Users with NarwhalRAT Malware
Beware of fake Microsoft account alerts! A sneaky North Korean hacking group, ScarCruft, is sending phishing emails that mimic Microsoft security notifications to trick you into downloading the NarwhalRAT malware.
Japan Pursues North Korea Talks to Secure Abductees' Return
With 869 missing persons suspected to have been abducted by North Korea, Japan's Prime Minister Sanae Takaichi is pushing to break a decades-long stalemate and bring home the victims. For families and loved ones, the wait for answers and closure has dragged on far too long.
North Korea Targets Developers with 250 Fake Job Offers in Credential Heist
In a sneaky credential heist, hackers sent over 250 fake job offers to developers at nearly 100 US organizations, disguising phishing attempts as recruitment messages. The six-week scam targeted professionals in tech, education, and finance.
North Korean Hackers Exploit Coding Lures to Steal Crypto Credentials
In a sneaky move, North Korean hackers sent over 250 emails with innocent-looking coding tasks to nearly 100 US-based organizations, tricking them into handing over cryptocurrency credentials. The clever phishing scam, tracked as UNK_DeadDrop, targeted tech, education, and finance firms, with a special focus on cryptocurrency companies.
Kimsuky Expands Malware Arsenal with HTTPSpy, HelloDoor
Kimsuky, a notorious North Korean hacking group, has upgraded its malware arsenal with HTTPSpy and HelloDoor, using clever tactics like fake installation pages and a spoofed Webex meeting to infiltrate targets. The group's latest attacks involve highly tailored social engineering and real-time infection verification to maximize success.
South Korea Advances Nuclear-Powered Submarine Program
South Korea is taking a giant leap in its naval capabilities with the Jang Bogo N Project, a new class of nuclear-powered submarines that will boast functionally unlimited range, higher mobility, and lightning-fast transit times. These game-changing vessels will play a crucial role in defending against threats from North Korea's submarines and more.