dprk - AlphaHunt Converge

gametheory

[GAME THEORY] The First Access Broker May Be the Recruiter

State-linked actors are competing for workforce trust. Map the handoffs that create access before the SOC sees an employee.

dprk

DPRK's Evolving Cyber Arsenal: Overlapping Malware, Supply Chain Attacks, and Social Engineering in Cryptocurrency and Developer Sectors

North Korean threat actors Slow Pisces, Alluring Pisces, and Contagious Interview—operating under the Reconnaissance General Bureau—have escalated global cyber operations since 2023, focusing on cryptocurrency theft and espionage. Their campaigns employ advanced social engineering..

apt

Strategic Cyber Threats: Chinese, Russian, and North Korean APTs.. How are they different?

Recent trends indicate a shared interest among these state-sponsored groups in exploiting vulnerabilities and utilizing AI tools like Google's Gemini to improve their cyberattack capabilities.

dprk

Lazarus Group's Cryptocurrency Heists: Bybit, BingX, and Phemex Under Siege

The Lazarus Group has intensified its focus on cryptocurrency exchanges, executing high-profile hacks on Bybit...

rid-hijack

RID Hijacking: A Stealthy Privilege Escalation Technique Exploited by Andariel Group

RID (Relative Identifier) hijacking is a sophisticated post-exploitation technique used by attackers to escalate privileges on compromised Windows systems.