UN Panel of Experts S/2024/215
https://paper.seebug.org/3033/ · September
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 39 of 75, PDF p. 326). DPRK cyber actor: ScarCruft; Report Name: https://paper.seebug.org/3033/; Case Summary: ScarCruft was identified using the WinRAR vulnerability (CVE -2023-38831) to attack the cryptocurrency industry, a significant shift in the group’s traditional targeting. ScarCruft used a malicious payload disguised as awallet screenshot.; Publication Month: September