Andariel

North Korea’s “Portfolio Model” Shatters Modern Attribution

• Cyber Security

North Korea’s “Portfolio Model” Shatters Modern Attribution

Do Son April 10, 2026 0

DomainTools exposes North Korea’s "mature portfolio model": a compartmentalized cyber strategy designed for mission specialization and attribution resistance.

OFAC Sanctions Key Players in North Korea’s Remote IT Worker Scheme Funding Weapons Programs

• Cyber Security

OFAC Sanctions Key Players in North Korea’s Remote IT Worker Scheme Funding Weapons Programs

Do Son July 10, 2025 0

OFAC sanctioned Song Kum Hyok (Andariel) and others for orchestrating North Korea's remote IT worker scheme, which used stolen identities to fund DPRK weapons programs.

North Korea’s Andariel Group Deploys New RID Hijacking Technique for Stealthy Attacks

• Cyber Security

North Korea’s Andariel Group Deploys New RID Hijacking Technique for Stealthy Attacks

Do Son January 27, 2025 0

Uncover the sophisticated RID Hijacking technique used by the Andariel threat group. Learn how this technique allows attackers to escalate privileges during breaches.

New Keylogger Targeting U.S. Organizations Linked to North Korean APT Group Andariel

• Cyber Security
• Malware

New Keylogger Targeting U.S. Organizations Linked to North Korean APT Group Andariel

Do Son November 5, 2024 0

Learn about the stealthy keylogger malware used by the North Korean APT group Andariel to infiltrate and harvest sensitive information from U.S. organizations.

North Korean Stonefly Group Continues Attacks on US Targets

• Cyber Security
• Malware

North Korean Stonefly Group Continues Attacks on US Targets

Do Son October 2, 2024 0

Symantec's Threat Hunter Team unveils the persistence of Stonefly, a North Korean cyberespionage group, in targeting U.S. organizations despite recent indictments.

North Korean Hackers Exploit VPN Vulnerabilities to Breach Networks

• Cyber Security
• Malware

North Korean Hackers Exploit VPN Vulnerabilities to Breach Networks

Do Son August 11, 2024 0

Learn about the escalating cyberattacks on South Korea's construction and engineering sectors and how cybercriminal groups are exploiting VPN vulnerabilities.

North Korean Hacker Indicted: Ransomware on Hospitals Funds Military Espionage

• Cyber Security

North Korean Hacker Indicted: Ransomware on Hospitals Funds Military Espionage

Do Son July 30, 2024 0

Uncover the alarming connection between a North Korean hacker, ransomware attacks on hospitals, and state-sponsored cyber espionage campaigns.

North Korea’s APT45: From Espionage to Ransomware Extortion

• Cyber Security

North Korea’s APT45: From Espionage to Ransomware Extortion

Do Son July 29, 2024 0

Discover how APT45 Andariel, a notorious North Korean hacker group, stole confidential information on weapon systems and technologies.

LilacSquid APT Unveiled: A Stealthy Campaign Targeting Global Industries

• Cyber Security
• Malware

LilacSquid APT Unveiled: A Stealthy Campaign Targeting Global Industries

Do Son May 31, 2024 0

LilacSquid deploys a series of malicious tools, including MeshAgent, a customized version of QuasarRAT, dubbed "PurpleInk,"

Andariel: North Korea’s Cyber Threat Actor Steals Data, Launches Ransomware Attacks

• Cyber Security
• Data Leak
• Malware

Andariel: North Korea’s Cyber Threat Actor Steals Data, Launches Ransomware Attacks

Do Son December 4, 2023 0

A North Korean hacking organization known as Andariel has been wreaking havoc in the digital realm, stealthily infiltrating South Korean firms