The Blockbuster Saga Continues

CSIS Significant Cyber Incidents

Cyber research firms reported a new malware campaign launched the day after North Korea’s July missile tests. The identified family of malware featured a command and control infrastructure with links to South Korea, and had previously been used in three ot her campaigns linked to North Korea.

EuRepoC

Researchers from Palo Alto Networks reveal the details of a new operation carried on by the North Korea-linked Lazarus Group against individuals involved with US Defense Contractors.

ThaiCERT Threat Group Cards

The Blockbuster Sequel This recently identified activity is targeting Korean speaking individuals, while the threat actors behind the attack likely speak both Korean and English. This blog will detail the recently discovered samples, their functionality, and their ties to the threat group behind Operation Blockbuster. https://unit42.paloaltonetworks.com/unit42-the-blockbuster-sequel/

ThaiCERT Threat Group Cards

The Blockbuster Saga Continues Unit 42 researchers at Palo Alto Networks have discovered new attack activity targeting individuals involved with United States defense contractors. https://unit42.paloaltonetworks.com/unit42-blockbuster-saga-continues/

Dyadic Cyber Incident Dataset v2

A malicioUSemail attachment was the vector for a RAT apparently designed to gather information on individuals interested in DPRK's missile launch in early July.

Dyadic Cyber Incident Dataset v2

After deployment of THAAD, China targets South Korean companies as well as government and military.

Dyadic Cyber Incident Dataset v2

DPRKn response to THAAD.

Hackmageddon cyber attacks timelines (Paolo Passeri)

Researchers from Palo Alto Networks reveal the details of a new operation carried on by the North Korea-linked Lazarus Group against individuals involved with US Defense Contractors.

Palo Alto Networks Unit 42

The Blockbuster sequel: Unit 42 researchers identify new overlapping threats tied to 2014's Operation Blockbuster. | From article: The Blockbuster Sequel Threat Research Center Threat Research Malware Malware The Blockbuster Sequel 8 min read By: Anthony Kasza Micah Yates Published: April 7, 2017 Categories: Malware Threat Research Tags: Blockbuster Korea Lazarus Group Spear Phishing Share Unit 42 has identified malware with recent compilation and distribution timestamps that has code, infrastructure, and themes overlapping with threats described previously in the Operation Blockbuster report, written by researchers at Novetta.

Unit 42 researchers at Palo Alto Networks have discovered new attack activity targeting individuals involved with United States defense contractors.