North Korea

US sanctions fraud network used by North Korean ‘remote IT workers’ to seek jobs and steal money

The U.S. Treasury has sanctioned an international fraud network used by North Korea to infiltrate U.S. companies with hackers posing as legitimate job seekers, agency officials announced Wednesday. The sanctions are the latest action taken by the U.S. Treasury in recent months aimed at combating North Korean government workers from seeking employment at American companies […]

US sanctions fraud network used by North Korean ‘remote IT workers’ to seek jobs and steal money Read More »

Hackers who exposed North Korean government hacker explain why they did it

Earlier this year, two hackers broke into a computer and soon realized the significance of what this machine was. As it turned out, they had landed on the computer of a hacker who allegedly works for the North Korean government.  The two hackers decided to keep digging and found evidence that they say linked the

Hackers who exposed North Korean government hacker explain why they did it Read More »

Hackers breach and expose a major North Korean spying operation

Hackers claim to have compromised the computer of a North Korean government hacker and leaked its contents online, offering a rare window into a hacking operation by the notoriously secretive nation.  The two hackers, who go by Saber and cyb0rg, published a report about the breach in the latest issue of Phrack magazine, a legendary

Hackers breach and expose a major North Korean spying operation Read More »

North Korean spies posing as remote workers have infiltrated hundreds of companies, says CrowdStrike

Researchers at security giant CrowdStrike say they have seen hundreds of cases where North Koreans posing as remote IT workers have infiltrated companies to generate money for the regime, marking a sharp increase over previous years. Per CrowdStrike’s latest threat hunting report, the company has identified over 320 incidents over the past 12 months, up

North Korean spies posing as remote workers have infiltrated hundreds of companies, says CrowdStrike Read More »

US government takes down major North Korean ‘remote IT workers’ operation 

The U.S. Department of Justice announced on Monday that it had taken several enforcement actions against North Korea’s money-making operations, which rely on undercover remote IT workers inside American tech companies to raise funds for the regime’s nuclear weapons program, as well as to steal data and cryptocurrency.   As part of the DOJ’s multi-state effort,

US government takes down major North Korean ‘remote IT workers’ operation  Read More »

Government hackers are leading the use of attributed zero-days, Google says

Hackers working for governments were responsible for the majority of attributed zero-day exploits used in real-world cyberattacks last year, per new research from Google. Google’s report said that the number of zero-day exploits — referring to security flaws that were unknown to the software makers at the time hackers abused them — had dropped from

Government hackers are leading the use of attributed zero-days, Google says Read More »

US lifts sanctions on Tornado Cash, a crypto mixer linked to North Korean money laundering

U.S. Treasury officials have lifted sanctions on Tornado Cash, a crypto mixer that the U.S. government previously said was used to launder $7 billion worth of crypto stolen by North Korean hackers. In a statement, the Treasury said it “exercised our discretion” to delist Tornado Cash following a legal battle. Sanctions make it illegal for

US lifts sanctions on Tornado Cash, a crypto mixer linked to North Korean money laundering Read More »

North Korea launches new unit with a focus on AI hacking, per report

The North Korean government is reportedly establishing a new hacking group within the intelligence agency Reconnaissance General Bureau (RGB).  Daily NK, a news outlet that focuses on North Korea, reported last week that the new hacking unit, called Research Center 227, will focus on research to develop “offensive hacking technologies and programs,” citing a source

North Korea launches new unit with a focus on AI hacking, per report Read More »

Hackers launder most of Bybit’s stolen crypto worth $1.4B

The hackers who stole around $1.4 billion in cryptocurrency from crypto exchange Bybit have moved nearly all of the robbed proceeds and converted them into Bitcoin, in what experts call the first phase of the money-laundering operation.  On February 21, Bybit said that a “sophisticated attack” on one of the company’s wallets resulted in the

Hackers launder most of Bybit’s stolen crypto worth $1.4B Read More »

FBI says North Korea ‘responsible’ for $1.4 billion Bybit heist

The FBI said the North Korean government is “responsible” for the hack at crypto exchange Bybit, which resulted in the theft of more than $1.4 billion in Ethereum cryptocurrency.  On Wednesday, the bureau released a public advisory, attributing the hack to a group known as TraderTraitor. Contact Us Do you have more information about the

FBI says North Korea ‘responsible’ for $1.4 billion Bybit heist Read More »