Security alert: social engineering campaign targets technology industry employees

2023-07-18 Git Hub

https://github.blog/2023-07-18-security-alert-social-engineering-campaign-targets-technology-industry-employees/

Thumbnail for Security alert: social engineering campaign targets technology industry employees

We assess with high confidence that this campaign is associated with a group operating in support of North Korean objectives, known as Jade Sleet by Microsoft Threat Intelligence and TraderTraitor by the U.S. Many of these targeted accounts are connected to the blockchain, cryptocurrency, or online gambling sectors. Jade Sleet mostly targets users associated with cryptocurrency and other blockchain-related organizations, but also targets vendors used by those firms. GitHub has identified a low-volume social engineering campaign that targets the personal accounts of employees of technology firms.

Indicators of Compromise

Type Value First Seen Last Seen
DOMAIN npmaudit.com 2023-07-18 2023-08-02
DOMAIN cryptopriceoffer.com 2023-07-18 2023-08-02
DOMAIN coingeckoprice.com 2023-07-18 2023-08-02
DOMAIN npmjscloud.com 2023-07-18 2023-08-02
DOMAIN tradingprice.net 2023-06-23 2023-08-02
DOMAIN npmrepos.com 2023-06-23 2023-08-02
DOMAIN bi2price.com 2023-06-23 2023-08-02
DOMAIN npmjsregister.com 2023-06-23 2023-08-02

Related Actors

Related Reports

« Back