Thehackernews

North Korean Hackers Use JSON Services for Malware Delivery

First seen 2 Dec 2025, 18:33 UTC • Thehackernews

•15.1

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

North Korean hackers, specifically the Lazarus Group, are utilizing JSON storage services to deliver malware through trojanized code projects in their Contagious Interview campaign. This tactic targets developers by luring them into downloading infected code hosted on platforms like JSON Keeper and JSONsilo, as reported by NVISO.

How this analysis works

Attack Flow

Continue Reading

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector Lazarus Group Escalates Attacks with Fileless RemotePE Trojan Targeting Crypto and Banks MuddyWater Targets U.S. Entities Amid Geopolitical Tensions Ripple Shares North Korean Threat Intelligence to Combat Evolving Cyber Attacks Kelp DAO and Aave Resume Operations After $292 Million Exploit North Korean Hackers Target Open Source Software Supply Chain via npm Packages

North Korean Hackers Use JSON Services for Malware Delivery

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading