ThaiCERT Threat Group Cards
North Korea Still Attacking Developers via npm · 2024-08
North Korea Still Attacking Developers via npm https://blog.phylum.io/north-korea-still-attacking-developers-via-npm/
North Korea Still Attacking Developers via npm
- Date (as written)
- 2024-08-29T19:31:00+00:00
- Year
- 2024
- Actors (as written)
- groups aligned with North Korean objectives
- Actor pages
- groups aligned with North Korean objectives
- Tags (as written)
- npm developers
Source entries (3)
Hackmageddon cyber attacks timelines (Paolo Passeri)
Developers using npm · 29/08/2024
Researchers at Phylum reveal that threat actors with ties to North Korea have been observed publishing a set of malicious packages to the npm registry, inside a campaign dubbed "Contagious Interview" targeting developers with malware and steal cryptocurrency assets. [Date Occurred: 12/08/2024; Date Discovered: 12/08/2024]
Veracode blog (incl. migrated Phylum research posts)
North Korea Still Attacking Developers via npm · 2024-08-29T19:31:00+00:00
In the past few weeks, we’ve observed a renewed surge of activity from groups aligned with North Korean objectives, publishing several packages to npm. ... The renewed surge began on August 12, 2024, with the publication of temp-etherscan-api and two versions of ethersscan-api .