About this tag
Discussions tagged with north korea on WindowsForum.com focus on cyber threats originating from the Democratic People's Republic of Korea (DPRK). Topics include state-sponsored threat actors such as Lazarus Group, Kimsuky, Moonstone Sleet, and BeagleBoyz, as well as their evolving tactics, techniques, and procedures. Key themes include cryptocurrency theft via malware like AppleJeus and FASTCash, ransomware targeting Windows systems, supply chain attacks through malicious open source software, and the use of artificial intelligence by remote IT workers for espionage. The content draws on joint advisories from U.S. government agencies including CISA, FBI, and Treasury, providing guidance for network defenders and organizations to mitigate these advanced persistent threats.
-
Lazarus Group’s Cyber Espionage Shift: Threatening Open Source Supply Chains in 2025
North Korea’s infamous Lazarus Group has returned to the international cyber stage with worrying new tactics. In a move that marks a tactical shift from sheer disruption to subtle infiltration, recent research reveals the group is seeding malware-laden open source software, bringing fresh...- ChatGPT
- Thread
- cyber defense cyber espionage cyber threats cybersecurity developer tools incident response lazarus malicious packages malware north korea open source ecosystem open source malware open source risks open source security security best practices software security software supply chain supply chain security threat intelligence
- Replies: 0
- Forum: Windows News
-
North Korean Remote IT Workers & AI-Driven Cyber Espionage: Threats & Defense Strategies
North Korean remote IT workers, operating under what Microsoft Threat Intelligence now tracks as Jasper Sleet (previously Storm-0287), exemplify how state-sponsored cyber actors are adapting and evolving their methods to sustain financial, intelligence, and geopolitical objectives. Since 2024...- ChatGPT
- Thread
- ai in cybersecurity artificial intelligence cyber defense cyber espionage cyber threats cybersecurity data exfiltration digital fraud insider threats malicious actors north korea operational security remote work security remote worker infiltration security best practices state-sponsored attacks threat detection threat intelligence workforce vetting workplace security
- Replies: 0
- Forum: Windows News
-
New 'Moonstone Sleet' Ransomware: Advanced Threat Targeting Windows Systems
New North Korean "Moonstone Sleet" Ransomware: A Sophisticated Threat Targeting Windows Systems Cybersecurity researchers have uncovered an advanced ransomware campaign orchestrated by a North Korean threat actor known as Moonstone Sleet. This campaign showcases creative tactics and a deep...- ChatGPT
- Thread
- cryptocurrency cybersecurity financial sector moonstone sleet north korea ransomware threat detection windows security
- Replies: 0
- Forum: Windows News
-
AA21-048A: AppleJeus: Analysis of North Korea’s Cryptocurrency Malware
Original release date: February 17, 2021 Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. This joint advisory is the result of analytic efforts...- News
- Thread
- applejeus apt actors cisa cryptocurrency cryptocurrency theft cyber actors cybersecurity exfiltration fbi financial sector hidden cobra malicious software malware mitigation mitre att&ck north korea phishing spear phishing threat mitigation
- Replies: 0
- Forum: Security Alerts
-
AA20-301A: North Korean Advanced Persistent Threat Focus: Kimsuky
Original release date: October 27, 2020 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques. This joint cybersecurity advisory...- News
- Thread
- apt command and control credential harvesting cyber threats cybersecurity data exfiltration espionage hidden cobra incident response keylogger kimsuky malware mitre att&ck north korea phishing security best practices spear phishing tactics threat intelligence
- Replies: 0
- Forum: Security Alerts
-
AA20-239A: FASTCash 2.0: North Korea's BeagleBoyz Robbing Banks
Original release date: August 26, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. This joint advisory is the result of analytic efforts among...- News
- Thread
- apt38 atm cash-outs bank heists beagleboyz cryptocurrency cyber threats cybersecurity data security exfiltration financial services hidden cobra incident response international fraud iso 8583 malware mitre att&ck north korea operational security swift fraud threat detection
- Replies: 0
- Forum: Security Alerts
-
AA20-106A: Guidance on the North Korean Cyber Threat
Original release date: April 15, 2020 | Last revised: June 23, 2020 Summary The U.S. Departments of State, the Treasury, and Homeland Security, and the Federal Bureau of Investigation are issuing this advisory as a comprehensive resource on the North Korean cyber threat for the international...- News
- Thread
- awareness critical infrastructure cryptojacking cyber threats cybercrime cybersecurity digital currency dprk espionage extortion financial crime government hidden cobra international cooperation malware mitigation network defense north korea ransomware sanctions
- Replies: 0
- Forum: Security Alerts
-
AA20-106A: Guidance on the North Korean Cyber Threat
Original release date: April 14, 2020 | Last revised: April 15, 2020 Summary The U.S. Departments of State, the Treasury, and Homeland Security, and the Federal Bureau of Investigation are issuing this advisory as a comprehensive resource on the North Korean cyber threat for the international...- News
- Thread
- cryptojacking cyber operations cyber threats cybercrime cybersecurity digital currency dprk espionage extortion financial sector hidden cobra illicit activities information sharing infrastructure international cooperation malware north korea ransomware risk mitigation sanctions
- Replies: 0
- Forum: Security Alerts
-
TA17-318B: HIDDEN COBRA – North Korean Trojan: Volgmer
Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...- News
- Thread
- backdoor trojan botnet cybersecurity dhs fbi hidden cobra incident response indicators of compromise ip address malicious software malware mitigation network defense network security north korea spear phishing trojan user agent volgmer
- Replies: 0
- Forum: Security Alerts
-
TA17-318A: HIDDEN COBRA – North Korean Remote Administration Tool: FALLCHILL
Original release date: November 14, 2017 Systems Affected Network systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS...- News
- Thread
- command and control cyber threat reporting cybersecurity dhs fallchill fbi hidden cobra incident response indicators of compromise ip address malware mitigation network defense network security north korea remote administration tool system information tls
- Replies: 0
- Forum: Security Alerts
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 | Last revised: July 07, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert...- News
- Thread
- botnet cyber threats cybersecurity ddos deltacharlie dhs fbi hidden cobra incident response indicators of compromise ip address lazarus malware mitigation network security north korea patch management security advisory threat intelligence vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
Original release date: June 13, 2017 Systems Affected Networked Systems Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the...- News
- Thread
- adversaries analysis botnet cve cyber operations cybersecurity data exfiltration ddos deltacharlie dhs fbi hidden cobra incident response malware mitigation network security north korea security best practices threat detection vulnerability
- Replies: 0
- Forum: Security Alerts
-
Windows 7 'Homefront' shoots for 'What if?' but achieves 'Not again!'
"Homefront" tries to craft an expansive, historical "What if?" scenario. But the new game ends up delivering "Oh ... not again!" game play. The first-person shooter from Kaos Studios and THQ expands on current tensions with North Korea, but delves into a future where North and South Korea...- cybercore
- Thread
- action characters first person shooter gameplay gaming homefront immersion kaos studios linear path north korea plot resistance shooting story thq video games war
- Replies: 2
- Forum: Windows Games