EuRepoC
North Korean state-sponsored hacking group Stonefly launched an attack on US companies in August 2024 · 01.08.2024
The North Korean state-sponsored hacking group 'Stonefly' (also known as the North Korean Surveillance Patrol hack group, Andriel, APT45, Sailant Garima or Orix Slit) attacked at least three US companies in August 2024, according to a report released by the cybersecurity company, Symantec. Stonefly used a custom malformation program called BlackDoor.Preft in this attack. The group has significantly improved its capabilities since 2019, focusing on high-value targets with sensitive information and/or know-how with a primarily financial motivation. The incident is part of Stonefly's continued monetary activities, despite arrest warrants and rewards offered by the US justice department against its members.