DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Multiple Organizations

Date (as written)
25/12/2024
Year
2024
Country
>1
Actors (as written)
?
Tags (as written)
Attack: Targeted Attack; Target Class: Multiple Industries; Attack Class: Cyber Espionage; Initial Access: Social Engineering

Source entries (2)

Check Point Research

30th December – Threat Intelligence Report · 2024-12-30
Researchers have observed “OtterCookie”, a new malware used in the North Korean-associated Contagious Interview campaign. This financially motivated campaign targets a broad range of victims and is active in Japan. OtterCookie communicates via Socket.IO, executes shell commands to exfiltrate sensitive data, including cryptocurrency keys, and uses clipboard data collection to enhance its capabilities.
https://research.checkpoint.com/2024/30th-december-threat-intelligence-report/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Multiple Organizations · 25/12/2024
Researchers from NTT Japan discover that North Korean threat actors are using new malware called OtterCookie in the Contagious Interview campaign that is targeting software developers. [Date Occurred: 'Recently'; Date Discovered: 'Recently']
https://www.hackmageddon.com/2025/04/18/16-31-december-2024-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/new-ottercookie-malware-used-to-backdoor-devs-in-fake-job-offers/

Suggest a correction on GitHub