Related Threat Clusters
-
ScarCruft's Supply-Chain Attack Targets Yanbian Gaming Platform with BirdCall Malware
ESET researchers reported a supply-chain attack by the North Korean APT group ScarCruft, targeting a gaming platform in the Yanbian region of China. The attack, ongoing since late 2024, involved trojanizing both Windows…
10 articles · Updated May 5, 2026 -
China-aligned APT Groups Target Global Maritime and Tech Sectors Amid Geopolitical Tensions
ESET's latest APT Activity Report reveals that from October 2025 to March 2026, China-aligned threat actors engaged in extensive espionage campaigns, particularly in Venezuela and the Gulf region. Following U.S.…
6 articles · Updated May 28, 2026 -
APT37 Hackers Deploy Custom Malware Against Air-Gapped Systems
North Korean threat group APT37 has initiated a campaign named Ruby Jumper, utilizing new custom malware to target air-gapped systems, which are typically isolated from the internet. This marks a significant advancement…
10 articles · Updated February 27, 2026 -
Five Plead Guilty in North Korean IT Worker Fraud Scheme
Five individuals have pleaded guilty to facilitating North Korean operatives in obtaining remote IT jobs at U.S. companies by using false and stolen identities. The U.S. Department of Justice has also seized $15 million…
39 articles · Updated November 17, 2025 -
Lazarus Group Linked to $30M Upbit Hack in South Korea
South Korean authorities suspect that North Korea's Lazarus Group was behind a hack of Upbit, resulting in losses of approximately $30.4 million. The breach involved unusual activity in Solana tokens and led Upbit to…
100 articles · Updated November 28, 2025
Recent Intelligence Reports
- ESET APT Activity Report Q4 2025–Q1 2026 — Welivesecurity · May 28, 2026
- North Korean hackers spy on China via video game platform | DigitalShield — Escudodigital · May 6, 2026
- North Korean hackers poison Chinese games in apparent bid to spy on refugees — Nknews · May 6, 2026
- New ScarCruft Supply Chain Attack Hits Gaming Platform With Windows and Android Backdoors — Cybersecuritynews · May 5, 2026
- Rigged Game Scarcruft Compromises Gaming Platform Supply Chain Attack — www.welivesecurity.com · May 5, 2026
- North Korean APT Targets Yanbian Gamers via Trojanized Platform — Infosecurity-Magazine · May 5, 2026
- ScarCruft Targets Gaming Platform With Windows, Android Backdoors — Gbhackers · May 5, 2026
- ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows — Thehackernews · May 5, 2026