Analyzing North Korean Hacking Groups

2023-07-03 • Code Engn •

https://raw.githubusercontent.com/codeengn/codeengn-conference/master/19/2023%20CodeEngn%20Conference%2019%2C%20Analyzing%20North%20Korean%20Hacking%20Groups%20%5B%E1%84%80%E1%85%B5%E1%86%B7%E1%84%8C%E1%85%B5%E1%86%AB%E1%84%8B%E1%85%A7%E1%86%BC%5D.pdf

#Slides

Attachments

202320CodeEngn20Conference20192C20Analyzing20North20Korean20Hackin_BakyLvC.pdf (4 MB)

The CodeEngn presentation reviews North Korean hacking groups and malware evolution across recent campaigns. It summarizes 2020-2022 statistics showing that North Korean actors used vulnerability exploitation and watering-hole techniques but relied most heavily on email-based attacks, with phishing accounting for 74 percent of observed activity. The material profiles Lazarus, Kimsuky, ScarCruft/APT37, and Andariel, noting campaigns against South Korean institutions, defense targets, journalists, North Korea-related experts, mobile devices, cloud-service backdoors, and certificate-software vulnerabilities.