DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Fake offensive security company "SecuriElite" set up to target security researchers

Date (as written)
2021-03-31T16:00:00+00:00 (datePublished)
Year
2021
Country
Turkey (claimed location of fake company)
Actors (as written)
North Korean government-backed entity
Actor pages
North Korean government-backed entity
Tags (as written)
security researchers

Source entries (5)

CSIS Significant Cyber Incidents

CSIS entry 485 · March 2021
The North Korean hacking group responsible for a set of attacks on cybersecurity researchers in January 2021 launched a new campaign targeting infosec professionals using fake social media profiles and a fake website for a non-existent security service company target.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

Check Point Research

5th April - Threat Intelligence Report · 2021-04-05
The North Korean campaign targeting security experts involved in vulnerability research, first published on January, has resumed. The attackers utilize alleged official websites presenting fake security companies in order to lure researchers into accessing a malicious PGP public key download link.
https://research.checkpoint.com/2021/5th-april-threat-intelligence-report/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Security Industry Specialists · 31/03/2021
Google's Threat Analysis Group (TAG) says that North Korean government-sponsored hackers are once again targeting security researchers using fake Twitter and LinkedIn social media accounts. [Date Occurred: Since mid-March 2021; Date Discovered: 17/3/2021]
https://www.hackmageddon.com/2021/04/06/16-31-march-2021-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/google-north-korean-hackers-target-security-researchers-again/

ESTsecurity 알약 블로그 (blog.alyac.co.kr)

북한 정부 지원 해커 그룹, 가짜 보안 회사 설립해 · 2021-04-06
summary: North Korean-Backed Group Sets Up Fake Security Company, Google Says 구글의 보고에 따르면, 북한 정부의 지원을 받는 공격자들이 보안 회사의 직원을 해킹하기 위한 캠페인을 통해 SNS에서 보안 연구원으로 가장한 것으로 나타났습니다. 보안 연구원들을 노린 공격자의 능력과 의지는 이 캠페인이 얼마나 심각한지 보여줍니다. 이는 사이버 보안 세계에서는 흔한 일이 아니기 때문에 더욱 흥미로운 일입니다. 몇 달 전, 구글은 취약점을 연구하는 보안 연구원들을 노린 한 캠페인을 발견했으며 북한 정부 지원 해커 그룹의 소행이라 밝혔습니다. 공격자들은 작업을 확대하기 위해 블로그, 가짜 연락처, 트위터 프로필을 만들고 영상을 업로드하고 소셜 미디어를 이용했습니다. 그 .. | target sentence: 보안 연구원들을 노린 공격자의 능력과 의지는 이 캠페인이 얼마나 심각한지 보여줍니다
https://blog.alyac.co.kr/3682

Google Threat Analysis Group (TAG) blog

Fake offensive security company "SecuriElite" set up to target security researchers · 2021-03-31T16:00:00+00:00 (datePublished)
In January, the Threat Analysis Group documented a hacking campaign, which we were able to attribute to a North Korean government-backed entity, targeting security researchers. On March 17th, the same actors behind those attacks set up a new website with associated social media profiles for a fake company called “SecuriElite.”
https://blog.google/threat-analysis-group/update-campaign-targeting-security-researchers/

Values found later for empty fields

actors: The North Korean hacking group responsible for the January 2021 attacks on cybersecurity researchers (no group named)
The North Korean hacking group responsible for a set of attacks on cybersecurity researchers in January 2021 launched a new campaign targeting infosec professionals
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

Suggest a correction on GitHub