Democratic People's Republic of Korea Archives

North Korea-Linked Hackers Steal $2.02 Billion in 2025, Leading Global Crypto Theft

19Dec

By RBNo Comments

News

North Korea-Linked Hackers Steal $2.02 Billion in 2025, Leading Global Crypto Theft

At least $2.02 billion of the more than $3.4 billion stolen between January and early December in 2025 came from threat actors with connections to the Democratic People's Republic of Korea (DPRK or North Korea). According to Chainalysis' Crypto Crime Report, which was released with The Hacker News, the amount reflects a 51% growth year over year and $681 million more than in 2024, when the threat actors took $1.3 billion. According to the blockchain intelligence firm, DPRK attacks accounted for a record 76% of all service compromises, making this the worst year on record for DPRK crypto theft in terms of value stolen. Of the $2.02 billion that North Korea stole, $1.5 billion came from the February hack of the cryptocurrency exchange Bybit alone. A threat cluster called TraderTrai...

North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts

17Oct

By RBNo Comments

News

North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts

For the first time a state-sponsored hacking outfit has adopted the EtherHiding methodology, a threat actor associated with the Democratic People's Republic of Korea (often known as North Korea) has been seen using it to spread malware and facilitate cryptocurrency theft. Google Threat Intelligence Group (GTIG) has linked the activity to a threat cluster it monitors as UNC5342, also known as CL-STA-0240 (Palo Alto Networks Unit 42), DeceptiveDevelopment (ESET), DEV#POPPER (Securonix), Famous Chollima (CrowdStrike), Gwisin Gang (DTEX), Tenacious Pungsan (Datadog), and Void Dokkaebi (Trend Micro). The attack wave is a part of a long-running campaign called Contagious Interview, in which the attackers approach potential targets on LinkedIn by pretending to be hiring managers or recruit...

North Korean Hackers Target macOS Using Flutter-Embedded Malware

12Nov

By RBNo Comments

News

North Korean Hackers Target macOS Using Flutter-Embedded Malware

The first time the adversary has used this strategy to attack Apple macOS devices, threat actors with connections to the Democratic People's Republic of Korea (DPRK, sometimes known as North Korea) have been discovered embedding malware within Flutter applications. The Flutter-built apps are a part of a larger operation that also includes malware written in Golang and Python, according to Jamf Threat Labs, which made the finding based on artifacts published to the VirusTotal platform earlier this month. The distribution of these samples to victims, whether they have been utilized against any targets, and whether the attackers are moving to a different delivery technique are all unknown read more about North Korean Hackers Target macOS Using Flutter-Embedded Malware. Get up to dat...

North Korean Hackers Update BeaverTail Malware to Target MacOS Users

18Jul

By RBNo Comments

News

North Korean Hackers Update BeaverTail Malware to Target MacOS Users

Researchers studying cybersecurity have found an upgraded version of a stealer virus that was previously distributed by attackers connected to the Democratic People's Republic of Korea (DPRK) as part of cyberespionage operations aimed at job seekers. According to security researcher Patrick Wardle, the artifact in question is an Apple macOS disk image (DMG) file called "MiroTalk.dmg" that appears to be a legitimate video conversation service of the same name, but in actuality acts as a conduit to deliver a native version of BeaverTail. In November 2023, Palo Alto Networks Unit 42 discovered BeaverTail, a JavaScript stealer malware. The campaign, called Contagious Interview, tries to infect software developers with malware by posing as a job interview process read more about North Ko...