CSIS entry 661 · December 2019
Microsoft won a legal battle to take control of 50 web domains used by a North Korean hacking group to target government employees, think tank experts, university staff, and others involved in nuclear proliferation issues
Government employees, think tanks, university staff members, members of organizations focused on world peace and human rights, and individuals that work on nuclear proliferation issues · 30/12/2019
Microsoft takes control of 50 domains used by Thallium, a state sponsored actor tied to North Korea, used to conduct targeted attacks against numerous organizations.
Thallium spear-phishing; Microsoft court order seizes 50 domains · 2019-12-30T20:18:41+00:00 (published_time)
On December 27, a U.S. district court unsealed documents detailing work Microsoft has performed to disrupt cyberattacks from a threat group we call Thallium, which is believed to operate from North Korea. ... Based on victim information, the targets included government employees, think tanks, university staff members, members of organizations focused on world peace and human rights, and individuals that work on nuclear proliferation issues. Most targets were based in the U.S., as well as Japan and South Korea.
country: U.S., as well as Japan and South Korea
Most targets were based in the U.S., as well as Japan and South Korea.