Multiple organizations worldwide

Date (as written): 16/05/2022
Year: 2022
Country: >1
Actors (as written): Democratic People’s Republic of Korea (DPRK)
Actor pages: Democratic People’s Republic of Korea
Tags (as written): Attack: Privileged Access; Target Class: Multiple Industries; Attack Class: CE; Tags: U.S. Department of State, U.S. Department of the Treasury, Federal Bureau of Investigation, FBI, Democratic People’s Republic of Korea, DPRK

Source entries (2)

US State/Treasury/FBI advisory "Guidance on the Democratic People's Republic of Korea Information Technology Workers" (May 16, 2022)

IT workers enabling DPRK malicious cyber intrusions · May 16, 2022

Although DPRK IT workers normally engage in IT work distinct from malicious cyber activity, they have used the privileged access gained as contractors to enable the DPRK's malicious cyber intrusions.

https://ofac.treasury.gov/media/923126/download?inline

Hackmageddon cyber attacks timelines (Paolo Passeri)

Multiple organizations worldwide · 16/05/2022

The U.S. Department of State, the U.S. Department of the Treasury, and the Federal Bureau of Investigation warn that the Democratic People’s Republic of Korea (DPRK) is dispatching its IT workers to get freelance jobs at companies across the world to obtain privileged access that is sometimes used to facilitate cyber intrusions. [Date Occurred: -; Date Discovered: -]

https://www.hackmageddon.com/2022/06/21/16-31-may-2022-cyber-attacks-timeline/

https://www.bleepingcomputer.com/news/security/north-korean-devs-pose-as-us-freelancers-to-aid-drpk-govt-hackers/

Suggest a correction on GitHub