North Korean APT InkySquid Infects Victims Using Browser Exploits

Date (as written): 2021-04
Year: 2021
Actors (as written): Reaper, APT 37, Ricochet Chollima, ScarCruft
Actor pages: Reaper APT 37 Ricochet Chollima ScarCruft

Source entries (1)

ThaiCERT Threat Group Cards

North Korean APT InkySquid Infects Victims Using Browser Exploits · 2021-04

North Korean APT InkySquid Infects Victims Using Browser Exploits https://www.volexity.com/blog/2021/08/17/north-korean-apt-inkysquid-infects-victims-using-browser-exploits/ https://www.volexity.com/blog/2021/08/24/north-korean-bluelight-special-inkysquid-deploys-rokrat/

https://www.volexity.com/blog/2021/08/17/north-korean-apt-inkysquid-infects-victims-using-browser-exploits/

https://www.volexity.com/blog/2021/08/24/north-korean-bluelight-special-inkysquid-deploys-rokrat/

Values found later for empty fields

country: South Korean

Volexity recently investigated a strategic web compromise (SWC) of the website of the Daily NK (www.dailynk[.]com), a South Korean online newspaper that focuses on issues relating to North Korea.

https://www.volexity.com/blog/2021/08/17/north-korean-apt-inkysquid-infects-victims-using-browser-exploits/

Suggest a correction on GitHub