DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Multiple organizations within the cryptocurrency and the blockchain industries

Date (as written)
03/01/2024
Year
2024
Country
>1
Actors (as written)
TA444 (a.k.a. Sapphire Sleet, BLUENOROFF, STARDUST CHOLLIMA)
Actor pages
TA444
Tags (as written)
Attack: Targeted Attack; Target Class: Fintech; Attack Class: Cyber Espionage; Tags: TA444, Sapphire Sleet, BLUENOROFF, STARDUST CHOLLIMA, SpectralBlur, KANDYKORN, Lazarus

Source entries (2)

Check Point Research

8th January – Threat Intelligence Report · 2024-01-08
Researchers have uncovered a new macOS backdoor named SpectralBlur. The malware is attributed to North Korean threat actors, displaying capabilities such as file upload and download, shell execution, and configuration updates. SpectralBlur signifies an escalating trend of North Korea-linked operations targeting macOS, particularly within the cryptocurrency and blockchain sectors.
https://research.checkpoint.com/2024/8th-january-threat-intelligence-report/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Multiple organizations within the cryptocurrency and the blockchain industries · 03/01/2024
A new Apple macOS backdoor called SpectralBlur overlaps with KANDYKORN, a known malware family attributed to North Korean threat actors from BlueNoroff (a.k.a. TA444), a subgroup of Lazarus. [Date Occurred: Since at least August 2023; Date Discovered: During August 2023]
https://www.hackmageddon.com/2024/04/04/1-15-january-2024-cyber-attacks-timeline/
https://thehackernews.com/2024/01/spectralblur-new-macos-backdoor-threat.html

Suggest a correction on GitHub