THALLIUM large-scale spear-phishing against government sector (MDDR 2021) · 2021-10-25T16:00:17+00:00 (blog summarizing MDDR 2021)
The nation-state groups we refer to as NOBELIUM, NICKEL, THALLIUM, and PHOSPHORUS were the most active against the government sector, targeting mostly government entities involved in international affairs. ... Some, such as North Korea-based THALLIUM, had a low rate of successful compromise likely because their common tactic of large-scale spear-phishing campaigns has become easier to detect and deter
North Korean targeting of consumer accounts (last three months of 2020) and of financial companies for cryptocurrency (MDDR 2021) · 2021-10-25T16:00:17+00:00 (blog summarizing MDDR 2021)
Just over half the NSNs Microsoft issued were for North Korea-based state actors during the last three months of 2020. The majority of the North Korean targeting was directed at consumer account targets, based on the likelihood of obtaining non-publicly available diplomatic or geopolitical intelligence. ... North Korea also continued to target financial companies with the intent of stealing cryptocurrency and intellectual property.