How one country is impacting supply chains (North Korean supply chain attacks; Contagious Interview)

Date (as written): December 12, 2023
Year: 2023
Actors (as written): North Korean state-sponsored groups; Lazarus group
Actor pages: North Korean state-sponsored groups Lazarus group
Tags (as written): open-source packages (NPM, PyPi); job applicants

Source entries (2)

UN Panel of Experts S/2024/215

https://medium.com/checkmarx-security/how-north-korea-is-compromising-supply-chains-df1532b29a49 · November

Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 64 of 75, PDF p. 330). DPRK cyber actor: DPRK cyberthreat actors, including Lazarus; Report Name: https://medium.com/checkmarx-security/how-north-korea-is-compromising-supply-chains-df1532b29a49; Case Summary: DPRK cyber actors posed as employers to lure software developers, many linked to the cryptocurrency industry, into installing malware hosted on a GitHub repository through a job interview process.; Publication Month: November

https://undocs.org/S/2024/215

Checkmarx blog

How one country is impacting supply chains (North Korean supply chain attacks; Contagious Interview) · December 12, 2023

In 2023, North Korea displayed significant activity by utilizing various strategies to undermine global supply chains. ... These attacks focus on exploiting the trust in shared code repositories, such as open-source packages available on NPM, PyPi, etc. ... A recent operation named 'Contagious Interview' was exposed and attributed to North Korea-backed threat actors.

https://checkmarx.com/blog/how-one-country-is-impacting-supply-chains/

Suggest a correction on GitHub