North Korean IT Operatives Infiltrate Global Companies to Deploy System Backdoors
ID: 135a7348-211c-5643-9a0c-55b13f9f4eff
STIX ID: report--135a7348-211c-5643-9a0c-55b13f9f4eff
Feed Name: Cyber Press
Threat Score
North Korean cyber operatives are exploiting remote-hire processes and sham IT firms to infiltrate international organizations, using malware families (BeaverTail, InvisibleFerret, OtterCookie) to exfiltrate data, maintain persistence, and fund regime activities; recent late-2024 campaigns targeted multiple cryptocurrency-related firms and the report recommends strengthened identity verification, access restrictions, and insider-threat monitoring.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.