A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide

A researcher infiltrated command-and-control systems used by North Korean-linked hackers and reports evidence that ~1,640 organizations in 57 countries were impacted—700–800 with significant intrusions including root and AWS access and theft of cryptocurrency keys. The researcher recovered roughly 5 TB of data, accessed attacker communications, and has disclosed affected parties (including healthcare, crypto firms, government bodies, and large tech firms); several victims report containment and remediation.