North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data - CyberSRC
Tags
country: China
attack-pattern: Data Credentials - T1589.001 Hardware - T1592.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Remote Desktop Protocol - T1021.001 Software - T1592.002 Web Services - T1583.006 Web Services - T1584.006 Vulnerabilities - T1588.006 Connection Proxy - T1090 Remote Access Tools - T1219 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID ae9c6be7-da4b-4d72-8535-c1f7d6df36d6
Fingerprint d5055137a0532c1
Analysis status DONE
Considered CTI value 1
Text language
Published Oct. 19, 2024, 4:40 a.m.
Added to db Oct. 19, 2024, 7:08 a.m.
Last updated Nov. 7, 2024, 5:47 p.m.
Headline North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data
Title North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data - CyberSRC
Detected Hints/Tags/Attributes 83/2/2
Source URLs
Redirection Url
Details Source https://cybersrcc.com/2024/10/19/north-korean-it-workers-in-western-firms-now-demanding-ransom-for-stolen-data/
URL Provider
Details Provider Source level domain
Details cybersrcc.com cybersrcc.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 94 ✔ CyberSRC https://cybersrcc.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
operations.in
Details Mandiant Uncategorized Groups 13 
UNC5267