According to Google’s Threat Analysis Group, state-sponsored North Korean hackers are targeting security researchers via social engineering. Writing in a blog post, the group says that the…
According to Google’s Threat Analysis Group, state-sponsored North Korean hackers are targeting security researchers via social engineering. Writing in a blog post, the group says that the campaign specifically targeted researchers working on vulnerability research and development. The campaign has been going for the « past several months. » The hackers attempted to establish a rapport with the security research community by creating a blog and several Twitter accounts. The blog itself featured write-ups of previously discovered vulnerabilities and « guests posts » with legitimate security researchers on the bylines. The various Twitter accounts would post links to their blog, retweet the other posts, and link to YouTube videos of alleged exploits.
