Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
FBI Attributes Record $6.43 Billion Binance Heist to North Korea's TraderTraitor: Detection and Hardening Guide
Introduction The Federal Bureau of Investigation (FBI), alongside the U.S. Secret Service (USSS) and Internal Revenue Service Criminal Inves...
DPRK Fake IT Worker Scheme: FBI Raids Texas Laptop Farms — Detection and Defense Guide for Hiring Orgs
The Breach Nobody Patched For: DPRK IT Workers Inside the Perimeter This week the Justice Department announced coordinated enforcement actio...
North Korean IT Worker Fraud: DoJ Dismantles 40+ Laptop Farms — Detection and Hardening Guide for Hiring and Endpoint Teams
Introduction The U.S. Department of Justice has charged 14 individuals — a mix of U.S. citizens and Chinese nationals — and seized approxima...
DPRK Job Fraud Expands to Healthcare and Sales: Insider Threat Detection and Hiring Controls for Defenders
The Insider Threat Is No Longer Confined to Your Engineering Org For the past several years, the security community has tracked the DPRK IT ...
North Korean Supply Chain Attack via Malicious Rust Crates: Detection and Remediation Guide for Defender Teams
Introduction Cybersecurity researchers have attributed a malicious unauthorized access mechanism — in plain terms, a backdoor — embedded in ...
Kimsuky's Offline AI Stack: Defending Against North Korea's AI-Automated Social Engineering and Malware Development
Kimsuky Moves AI In-House — and What That Means for Your SOC North Korean state-sponsored threat actors have spent the past two years experi...
npm Supply Chain Attack: North Korean Campaign Targeting Axios Users — Detection and Mitigation
npm Supply Chain Attack: North Korean Campaign Targeting Axios Users — Detection and Mitigation Introduction AWS has publicly attributed a w...
North Korean NPM Supply Chain Attacks: Amazon Attribution and Defensive Strategies
North Korean NPM Supply Chain Attacks: Amazon Attribution and Defensive Strategies Introduction Amazon's security teams have recently attrib...
North Korea-Linked npm Supply Chain Attack: Rollup Polyfill Mimicry Detection
North Korea-Linked npm Supply Chain Attack: Rollup Polyfill Mimicry Detection Introduction A sophisticated supply chain attack has been iden...