In a deep dive into the Silent Train attack tactic used by China’s Volt Typhoon cybercrime group, Lumen’s Black Lotus Labs highlighted evidence of efforts to pre-position access within what it described as “strategic communications, critical infrastructure and other ecosystems…
The Department of Justice Oct. 13 announced a series of actions disrupting a scheme by the North Korean government that involved placing remote IT workers in U.S. companies to conduct malicious activities on the government’s behalf. The scheme involved North Korean IT…
Hangzhou Xiongmai Technology admitted weak product passwords were partly to blame for last week's massive attack. A Chinese electronics manufacturer admitted that its products inadvertently contributed to last week's massive cyberattack that knocked popular Web services offline. On Friday, a…
China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that attackers are crashing its firewalls…
The U.S. Treasury sanctioned ten people and one entity, including two Russian crypto middlemen, for laundering money from North Korean fake IT worker schemes that fund its weapons programs. The U.S. Treasury Department on Tuesday sanctioned ten individuals and one company, accusing…
An Open Letter from TRM CEO and Co-Founder Esteban Castano Three of the designated individuals have cryptocurrency ties, and the designation lists eight cryptocurrency addresses for them. TRM Labs has added all three individuals and their addresses to TRM under…
Volt Typhoon, a Chinese state-sponsored APT group that’s focused on cyberespionage and United States’ critical infrastructure, has been using a covert, constantly rotating relay network to hide its most sensitive intrusions, Lumen’s Black Lotus Labs revealed on Wednesday. This network,…
Two Russian nationals are at the center of Wednesday's action, marking the first time the Office of Foreign Assets Control (OFAC) has designated Russian citizens specifically for laundering DPRK IT worker earnings — a significant expansion of enforcement pressure onto a…
UN estimates put annual revenue from North Korea's IT worker schemes as high as $600 million, while Chainalysis uncovered how crypto salaries reached Russian intermediaries. US authorities sanctioned a crypto cash-out network accused of turning North Korean undercover IT workers' earnings…
North Korean workers have been linked to two companies that support Russia’s military-industrial complex, according to a new investigation, documenting a network of Russian firms and individuals that disguise employment as education to circumvent sanctions. In a report released Thursday,…
Hacking by governments: North Korean crypto theft and IT-worker schemes, Chinese and Iranian hacking campaigns, indicted state hackers.
An article joins this feed when it matches these terms. Each one is also a search of its own.