Researchers at Gen Threat Labs have identified two new toolsets in active use by North Korean state-sponsored groups, underscoring the regime’s continued investment in advanced cyber-espionage and…

Recent research describes a new multi-stage malware chain that delivers a previously undocumented backdoor dubbed HttpTroy. The campaign…

Groups operating in the interests of the DPRK continue to aggressively expand their infrastructure for cyber espionage, financial

At a glance Actor or group Kimsuky, a North Korea-linked group also tracked as Springtail, Thallium and APT43 Activity type Espionage, supply-chain pivoting, credential theft, Linux backdoor deplo…