North Korean Malicious Cyber Activity
2020-05-12 • USCISA •
https://www.us-cert.gov/ncas/current-activity/2020/05/12/north-korean-malicious-cyber-activity
CISA, the FBI, and the Department of Defense reported three malware variants used by the North Korean government, which the U.S. Government tracks as HIDDEN COBRA activity. U.S. Cyber Command released samples for the variants to VirusTotal so defenders could inspect and compare them against the related Malware Analysis Reports. The short notice is primarily a coordination pointer rather than a technical teardown, but it establishes the government attribution, malware-sample release, and recommended defensive follow-up for North Korean malicious cyber activity.