IT Job Seekers · 08/11/2023
Microsoft researchers warn of a new social engineering campaign from the BlueNoroff North Korean threat actor, aimed at IT job seekers that relied on a new cluster of bogus skills assessment portals. [Date Occurred: 'In the past few weeks'; Date Discovered: 'In the past few weeks']
https://twitter.com/MsftSecIntel/status/1722316019920728437 · November
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 52 of 75, PDF p. 328). DPRK cyber actor: Lazarus/ Andariel; Report Name: https://twitter.com/MsftSecIntel/status/1722316019920728437; Case Summary: Lazarus/Andariel exploited CVE-2023-42793, a remote code execution vulnerability affecting multiple versions of the JetBrains TeamCity server and utilized different sets of tools and techniques.; Publication Month: November
Social media post, Microsoft Threat Intelligence · 8 November 2023
Annex 99 (Select reports of DPRK cyber actors targeting the cryptocurrency industry), report 8: Social media post, Microsoft Threat Intelligence, 8 November 2023. Summary: BlueNoroff cyber actors had, within the prior few weeks, created new websites masquerading as skills assessment portals, marking a shift in the persistent actor’s tactics. As part of this, BlueNoroff is targeting users on LinkedIn and enticing them with deceptive lures related to a skills assessment ...
Sapphire Sleet campaign against IT job seekers via fake skills assessment portals · Q4 2023 (from title: APT QUARTERLY HIGHLIGHTS : Q4 - 2023)
Sapphire Sleet; a subset of Lazarus known for cryptocurrency theft from exchanges, venture capital firms, and banks, has initiated a targeted campaign against IT job seekers, using deceptive skills assessment portals.