As cited
Copy frozen at (site build).
threat intel
Justice Department says North Koreans have infiltrated dozens of U.S. companies
The U.S. Justice Department warns that North Korean hackers have infiltrated dozens of American companies and are recruiting U.S. individuals as intermediaries to facilitate data transfers to Pyongyang. The campaign represents an escalation in how sanctioned threat actors are using compromised networks to channel stolen information to the regime.
Why it matters: Practitioners at U.S. companies must assume North Korean nation-state actors are actively targeting their networks and insider recruitment; detection and response procedures should include monitoring for suspicious data exfiltration and anomalous user behavior that could indicate a compromised employee acting as a facilitator.
- Source published
- First seen by Cybersecurity Tracker