The State Department announced Thursday it will pay up to $15 million for information leading to the arrest of seven North Korean nationals accused of operating criminal schemes that generate revenue for Pyongyang’s weapons programs, marking the latest effort to disrupt financing networks that have funneled money around sanctions. The coordinated action that also involved…
Category: North Korea
AI, Cybercrime, Cybersecurity, Department of Justice (DOJ), Geopolitics, Global Security News, North Korea, North Korean IT workers, sanctions, Treasury Department
North Korea’s ‘state-run syndicate’ looks at cyber operations as a survival mechanism
Over the past few years, cybersecurity experts have increasingly said that nation-state operatives and cybercriminals often blur the boundaries between geopolitical and financial motivations. A new report released Wednesday shows how North Korea has flipped that idea on its head. North Korea has silently forged a global cyber operation that experts now liken to a…
Cybercrime, Cybersecurity, Global Security News, google cloud, Google Threat Intelligence Group, Mandiant, North Korea, North Korean IT workers, Research, Technology, Threats
North Korean operatives have infiltrated hundreds of Fortune 500 companies
SAN FRANCISCO — North Korean nationals have infiltrated the employee ranks at top global companies more so than previously thought, maintaining a pervasive and potentially widening threat against IT infrastructure and sensitive data. “There are hundreds of Fortune 500 organizations that have hired these North Korean IT workers,” Mandiant Consulting CTO Charles Carmakal said Tuesday…
Asia Pacific, china, Cybersecurity, Global Security News, Google, malware, North Korea, Security, Spyware, zero days
Government hackers are leading the use of attributed zero-days, Google says
Governments like China and North Korea, along with spyware makers, used the most recorded zero-days in 2024.
china, critical infrastructure, FireEye, Global Security News, North Korea, North Korean IT workers, Ransomware, Research, Russia, SentinelOne, SolarWinds, telecommunications, Threats, Workforce
Cybersecurity vendors are themselves under attack by hackers, SentinelOne says
Cybersecurity companies don’t just defend their customers against cyberattacks — they also have to defend themselves, and a SentinelOne report published Monday examines some of the biggest threats they’re facing. Those include ransomware, Chinese government-sponsored hackers and North Korean IT workers posing as job applicants, according to the report from SentinelOne’s SentinelLabs. “In recent months,…
AI, Artificial Intelligence (AI), Asia Pacific, china, cloud computing, Cybercrime, Cybersecurity, Global Security News, North Korea, Russia, SentinelOne, wiz
AI can help defenders stop nation-state threat actors at machine speed
Last year, the escalating concerns about Chinese threat actors breaching U.S. organizations reached a crescendo as federal authorities issued increasingly urgent advisories about China’s “Typhoon” groups infiltrating U.S. networks, pressing organizations to take immediate action. The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) warned that these groups were engaged…
cyber security, Cybersecurity, Developer, emea, espionage, EU, Europe, Global Security News, Google, International, it industry, News, North Korea, Security, uk, United Kingdom
North Korean Hackers Disguised as IT Workers Targeting UK, European Companies, Google Finds
The attackers pose as legitimate remote IT workers, looking to both generate revenue and access sensitive company data through employment. “Europe needs to wake up fast,” according to Google’s Jamie Collier.
crowdstrike, Cybercrime, Cybersecurity, Global Security News, North Korea, North Korean IT workers, Palo Alto Networks, Research, Threats, Unit 42
The North Korea worker problem is bigger than you think
North Korean nationals have infiltrated businesses across the globe with a more expansive level of organization and deep-rooted access than previously thought, insider risk management firm DTEX told CyberScoop. This swarm of technical North Korean experts isn’t just intruding businesses as ad hoc freelance IT workers; they’ve gained full-time employment as engineers and specialists of…
Crypto, Cybersecurity, Global Security News, North Korea, sanctions, Security, tornado cash
US lifts sanctions on Tornado Cash, a crypto mixer linked to North Korean money laundering
Tornado Cash was used to launder billions in stolen crypto, according to the Treasury.
AI, CryptoCurrency, Cybersecurity, Global IT News, Global Security News, Hackers, North Korea, Security
North Korea launches new unit with a focus on AI hacking, per report
North Korea is reportedly launching a new cybersecurity unit called Research Center 227 within its intelligence agency Reconnaissance General Bureau (RGB). © 2025 TechCrunch. All rights reserved. For personal use only.
china, Cybercrime, Cybersecurity, Evil Corp, Exploits, Global Security News, Government, India, Microsoft, nation state threats, nation-state hackers, North Korea, pakistan, Ransomware, Research, Russia, Stanford University, Threats, trend micro, vulnerability, Windows, Zero Day Initiative, zero days
Nation-state groups hit hundreds of organizations with Microsoft Windows zero-day
Cybercriminals working on behalf of at least six nation-states are actively exploiting a zero-day vulnerability in Microsoft Windows to commit espionage, steal data and cryptocurrency, according to Trend Micro researchers. The vulnerability, which Trend Micro tracks as ZDI-CAN-25373, allows attackers to execute hidden malicious commands due to the way Windows displays the contents of shortcut…
CryptoCurrency, Cybercrime, Cybersecurity, GitHub, Global Security News, malware, North Korea, npm, Research, Socket, software security, Threats
Lazarus Group deceives developers with 6 new malicious npm packages
Lazarus Group has burrowed deeper into the npm registry and planted six new malicious packages designed to deceive software developers and disrupt their workflows, researchers at cybersecurity firm Socket said in a Monday blog post. The North Korea-linked threat group embedded BeaverTail malware into the npm packages to install backdoors and steal credentials and data…
Bitcoin, Crypto, CryptoCurrency, ethereum, fbi, Global IT News, Global Security News, Hackers, North Korea, Security
Hackers launder most of Bybit’s stolen crypto worth $1.4 billion
Experts note that this is just the first step for the alleged North Korean hackers to profit from the historic heist. © 2024 TechCrunch. All rights reserved. For personal use only.
Crypto, CryptoCurrency, Cybersecurity, fbi, Global IT News, Global Security News, North Korea, Security
FBI says North Korea ‘responsible’ for $1.4 billion Bybit heist
The U.S. government law enforcement agency said a North Korean government hacking group it calls TraderTraitor was behind the massive hack of Bybit. © 2024 TechCrunch. All rights reserved. For personal use only.
Crypto, CryptoCurrency, Cybersecurity, eth, ethereum, Global IT News, Global Security News, Hackers, North Korea, Security
Hacked crypto exchange Bybit offers $140 million bounty to trace stolen funds
Bybit has already paid more than $4 million to bounty hunters who helped trace and freeze some of the stolen funds. © 2024 TechCrunch. All rights reserved. For personal use only.
blockchain, Crypto, CryptoCurrency, Cybercrime, Cybersecurity, Elliptic, ethereum, Exploits, Global Security News, Money, North Korea, TRM Labs
Crypto analysts stunned by Lazarus Group’s capabilities in $1.46B Bybit theft
Last week’s $1.46 billion Ethereum theft by North Korean-linked Lazarus Group has sent shockwaves through the cybercrime ecosystem, as it has not only joined the ranks of the largest known financial thefts in history but also demonstrated that the group’s skillset is presenting new challenges for defenders. In the wake of the theft, numerous experts…
blockchain, Crypto, Cybersecurity, Global IT News, Global Security News, Hackers, North Korea, Security
Researchers accuse North Korea of $1.4 billion Bybit crypto heist
North Korea is behind the massive crypto hack, according to several blockchain monitoring firms and a well-known researcher © 2024 TechCrunch. All rights reserved. For personal use only.
data breach, Data loss, Global Security News, Guest blog, Laptop, Law & order, North Korea, remote working, Security threats
US woman faces years in federal prison for running laptop farm for N Korean IT workers
Christian Marie Chapman, of Litchfield Park, Arizona, helped generate over US $17 million for North Korea after over 300 US companies unwittingly hired staff believing them to be US citizens. Read more in my article on the Hot for Security blog.
Asia Pacific, china, Cybercrime, Global Security News, Google, North Korea, Russia, Sandworm, Trellix, Ukraine
U.S. adversaries increasingly turning to cybercriminals and their malware for help
Governments of the United States’ chief adversaries in cyberspace, especially Russia, have increasingly been relying on cybercriminals and their tools to advance their goals, according to a Google report published Tuesday. There’s long been overlap between government and criminal cyber operators, but governments are now enjoying the benefits of collaboration and borrowing more — both…
Cybersecurity, Global IT News, Global Security News, North Korea, Security, us government
US indicts five individuals in crackdown on North Korea’s illicit IT workforce
The multi-year scheme saw the defendants generate hundreds of thousands in revenue. © 2024 TechCrunch. All rights reserved. For personal use only.
Cybercrime, Department of Justice (DOJ), Global Security News, North Korea, North Korean IT workers
DOJ indicts five in North Korean fake IT worker scheme
The U.S. government delivered another blow to North Korea’s fake IT worker scheme Thursday, with the Department of Justice announcing indictments against five men for fraudulently obtaining remote credentials to work with American companies and generate revenue for Pyongyang. The indictments of North Korean nationals Jin Sung-Il and Pak Jin-Song, Mexican national Pedro Ernesto Alonso…
Geopolitics, Global Security News, Government, North America, North Korea, North Korean IT workers, sanctions, Treasury Department
Treasury sanctions North Korea over remote IT worker schemes
The U.S. Treasury Department announced sanctions Thursday against two individuals and four entities allegedly involved in generating revenue for North Korea through illicit remote IT workforce operations, the latest salvo in ongoing efforts to disrupt financial streams that support Pyongyang’s weapons programs. The sanctions focus on efforts in which North Korea sent thousands of skilled…
Crypto, Global IT News, Global Security News, North Korea, Security, TC, WazirX
North Korea stole over $659M in crypto heists during 2024, deploys fake job seekers
A joint international statement provides the first official confirmation that North Korea was behind the $235M hack of WazirX, India’s largest cryptocurrency exchange. © 2024 TechCrunch. All rights reserved. For personal use only.
Crypto, CryptoCurrency, Department of Justice, fbi, Global IT News, Global Security News, money laundering, North Korea, Ransomware, sanctions, Security
US government charges operators of crypto mixing service used by North Korea and ransomware gangs
Three Russian citizens were charged with money laundering for their role in operating Blender.io and Sinbad.io crypto mixing services. © 2024 TechCrunch. All rights reserved. For personal use only.
Cybercrime, Global Security News, North Korea, North Korean IT workers, South Korea
South Korea sanctions 15 North Koreans for IT worker scams, financial hacking schemes
The South Korean government has sanctioned more than a dozen individuals and one organization for a wide-ranging global scheme to fund North Korea’s nuclear and missile programs through impersonating IT workers abroad, stealing cryptocurrency and facilitating cyberattacks. South Korean officials on Thursday identified 15 North Korean nationals and the Chosun Geumjeong Economic Information Technology Exchange…
Cloud Security, CryptoCurrency, Cybersecurity, Endpoint, Featured, Global Security News, Incident Response, Industry Spotlight, IT worker scam, Network Security, News, North Korea, Security Awareness, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X, Spotlight, Threat Intelligence
North Korean Hackers Stole $1.34 Billion in Crypto in 2024
North Korean hackers stole $1.34 billion in cryptocurrency in 2024, more than half of the $2.2 billion stolen in all crypto hacks, and the attacks by threat groups linked to the rogue nation are becoming more frequent and are happening more quickly. The post North Korean Hackers Stole $1.34 Billion in Crypto in 2024 appeared…
Crypto, Global IT News, Global Security News, North Korea, Security
North Korea-linked hackers accounted for 61% of all crypto stolen in 2024
With the rising adoption and value of crypto assets, the potential for theft is also on the rise. This year, the total value of cryptocurrency stolen surged 21%, reaching a substantial $2.2 billion. And according to a Chainalysis report released on Thursday, more than half of this amount was stolen by North Korea-affiliated hacking groups.…
china, Cybercrime, Department of Justice, Department of Justice (DOJ), Geopolitics, Global Security News, Justice Department, Mandiant, North America, North Korea, North Korean IT workers, Russia, State Department, U.S. courts, U.S. Department of Justice
Court indicts 14 North Korean IT workers tied to $88 million in illicit gains
A federal court has indicted 14 more North Korean IT workers as part of an ongoing U.S. government campaign to crack down on Pyongyang’s use of tech professionals to swindle American companies and nonprofits. The Justice Department said the 14 indicted workers generated at least $88 million throughout a conspiracy that stretched over approximately six…
CryptoCurrency, data breach, Data loss, Global Security News, Guest blog, North Korea
North Korean hackers masquerade as remote IT workers and venture capitalists to steal crypto and secrets
In itslust for stealing cryptocurrency and sensitive information, North Korean hackers are disguising themselves as remote IT workers, recruiters, and even venture capitalists. Read more in my article on the Hot for Security blog.