macOS Backdoor Uses Prompt Injection to Evade AI Triage
SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools
This tag covers cybersecurity incidents, policy, public services, privacy, advisories, and regional implications connected to North Korea.
Search across headline titles and summaries.
Background for this topic.
North Korea covers cybersecurity and information-security developments connected to North Korea, including incidents, policy, privacy, advisories, research, and news affecting organizations, public services, and digital systems in the area.
For practitioners, the tag provides geographic context for developments involving North Korea's organizations, services, partners, and users. Individual articles provide the specific technologies, threats, sectors, and operational implications relevant to each development.
Weekly headline count for the current query.
SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools
North Korean threat actor Sapphire Sleet has been linked to a supply chain attack targeting Mastra, according to Microsoft security researchers
Nisos infiltrated a North Korean IT-worker fraud cell running on AI interviews and a US laptop farm
North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto
ESET warns that North Korean hackers compromised a Yanbian gaming site in a supply‑chain attack, trojanizing Windows and Android software to spy on users
Arctic Wolf attributed this large-scale spear-phishing campaign to BlueNoroff, a financially motivated subgroup of the Lazarus Group
North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO
US authorities jail two Americans for aiding North Korean laptop farm scams that infiltrated over 100 firms
The security researchers from Zscaler ThreatLabz have also discovered five new tools deployed by the North Korean hacking group
Ransomware Medusa linked to North Korean hackers targets US healthcare amid ongoing attacks
Campaign combines stolen Telegram accounts, fake Zoom calls and ClickFix attacks to deploy infostealer malware
CrowdStrike assessed that two new threat actor groups have spun off from North Korean Labyrinth Chollima hackers
The FBI says North Korea’s Kimsuky APT group is using QR codes in spear phishing campaigns
Chainalysis warns North Korea continues to steal billions in crypto for its weapons program
A new variant of the BeaverTail malware linked to North Korean hackers has been identified targeting cryptocurrency traders and developers
Sysdig has found sophisticated malicious campaigns exploiting React2Shell that delivered EtherRAT and suggested North Korean hackers’ involvement
The five defendants allegedly assisted North Korean hackers with obtaining remote IT employment with US companies
A new cyber-attack has been observed exploiting Google Find Hub to remotely wipe Android devices, linked to North Korean APTs
Cyber-attacks by North Korea’s Lazarus Group target European defense firms in drone development
Google reveals North Korean hackers are using EtherHiding, a blockchain-based technique, to deliver malware and steal cryptocurrency