CFR Cyber Operations Tracker
Watering-hole attack on popular North Korean news site · Aug 2021
North Korea launched watering-hole attacks from popular anti-North Korea website the Daily NK.
InkySquid strategic web compromise of Daily NK delivering BLUELIGHT (late March to early June 2021)
- Date (as written)
- 2021-08-17T16:15:15+00:00 (published_time)
- Year
- 2021
- Country
- South Korean
- Actors (as written)
- InkySquid (ScarCruft, APT37)
- Actor pages
- InkySquid
- Tags (as written)
- news media (North Korea-focused online newspaper); watering hole
Source entries (3)
Hackmageddon cyber attacks timelines (Paolo Passeri)
North Korean visitors · 17/08/2021
Researchers from Volexity reveal that the Korean APT InkySquid has breached Daily NK, one of the most popular North Korean-themed news sites on the internet in order to carry out a watering hole attack and infect some of the site’s visitors with malware. [Date Occurred: From at least late March 2021 until early June 2021; Date Discovered: -]
Volexity blog
InkySquid strategic web compromise of Daily NK delivering BLUELIGHT (late March to early June 2021) · 2021-08-17T16:15:15+00:00 (published_time)
Volexity recently investigated a strategic web compromise (SWC) of the website of the Daily NK (www.dailynk[.]com), a South Korean online newspaper that focuses on issues relating to North Korea. Malicious code on the Daily NK website was observed from at least late March 2021 until early June 2021. ... Volexity attributes the activity described in this post to a threat actor Volexity refers to as InkySquid, which broadly corresponds to activity known publicly under the monikers ScarCruft and APT37.