North Korean Threat Actors Exploit Python Packages to Deliver PondRAT Malware - CyberSRC
Tags
cmtmf-attack-pattern: Supply Chain Compromise
country: North Korea
attack-pattern: Code Repositories - T1213.003 Code Repositories - T1593.003 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Supply Chain Compromise - T1474 Supply Chain Compromise - T1195 Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID 6e45fec2-4ae1-4123-b702-0e8fc2559dbb
Fingerprint 529431f8815a699
Analysis status DONE
Considered CTI value 1
Text language
Published Sept. 23, 2024, 9:37 a.m.
Added to db Sept. 23, 2024, 12:36 p.m.
Last updated Sept. 23, 2024, 12:36 p.m.
Headline North Korean Threat Actors Exploit Python Packages to Deliver PondRAT Malware
Title North Korean Threat Actors Exploit Python Packages to Deliver PondRAT Malware - CyberSRC
Detected Hints/Tags/Attributes 59/3/1
Source URLs
Redirection Url
Details Source https://cybersrcc.com/2024/09/23/north-korean-threat-actors-exploit-python-packages-to-deliver-pondrat-malware/
URL Provider
Details Provider Source level domain
Details cybersrcc.com cybersrcc.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 94 ✔ CyberSRC https://cybersrcc.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Mandiant Uncategorized Groups 59 
UNC4736