CSIS entry 842

CSIS Significant Cyber Incidents

Cyber security researchers reported that North Korean hackers had been targeting defectors through compromised Android apps hosted through the Google Play market, stealing device information and allowing the insertion of executable code stealing photos, contact lists, and text messages.

A North Korean group nicknamed Sun Team recently posted three apps in Google Play that were used to target defectors from the authoritarian country.