▶FBI warns of new malware from North Korea

The comparison
Tutorials
FBI warns of new malware from North Korea

The FBI and the Cybersecurity Infrastructure Security Agency (CISA) have released new information about North Korean malware in the form of six new Malware Analysis Reports (MARs). US agencies have released these MARs to provide organizations with detailed malware analysis information that has been acquired through manual reverse engineering of malware samples. At the same time, reports have also been released to help network defenders detect and reduce exposure to malicious activity by the North Korean government, which the US government calls HIDDEN COBRA. CISA recommends that all users and administrators carefully review the seven MARs in a blog post, saying, "Each MAR includes malware descriptions, suggested response actions, and recommended mitigation techniques." Users or administrators should report activity associated with the malware and report the activity to CISA or FBI Cyber Watch (CyWatch), and give the activity the highest priority for enhanced mitigation. "

North Korean malware

In addition to releasing new MARs, US Cyber Command has also uploaded malware samples to VirusTotal, saying in a tweet, "This malware is currently being used for phishing and remote access by DPRK cyber actors to carry out illegal activities, steal funds and evade sanctions." The reports published by CISA provide a detailed analysis of six new malware samples currently being tracked by US authorities under the names Bistromath, Slickshoes, Crowdedflounder, Hotcroissant, Artfulpie, and Buffetline. While some of them are Remote Access Trojans (RATs) and malware, others are described as fully dialed implants used to download, download, delete, and execute files CISA and other US government agencies attribute malware to a group North Korean government-backed hacking division known as HIDDEN COBRA, but the group is also known as the Lazarus Group and c'is the largest and most active hacking division in North Korea. Via BleepingComputer

FBI warns of new malware from North Korea

North Korean malware (adsbygoogle = window.adsbygoogle || []).push({});

North Korean malware