UN Panel of Experts S/2024/215
ta444-apt-startup-aimed-at-your-funds · January
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 2 of 75, PDF p. 319). DPRK cyber actor: TA444 (Overlaps with BlueNoroff); Report Name: ta444-apt-startup-aimed-at-your-funds; Case Summary: A TA444 Command and Control (C2) domain sent phishing emails to targets in the U.S. and Canada including education, government, healthcare, and finance verticals. The lure emails enticed users to click a ‘SendGrid URL’ which redirected victims to a credent ial harvesting page. This was reportedly a deviation from previous TA444 operations which typically involved the direct deployment of malware.; Publication Month: January