Find My Device is described as a cyberattack capability attributed to North Korean threat actors in relation to a 2025 'blackout' operation.
Overview
Find My Device is described as a cyberattack capability attributed to North Korean threat actors in relation to a 2025 'blackout' operation. It is characterized as a device-discovery and remote-control utility that helps locate, map, and potentially manipulate endpoints within target networks to enable disruption of critical infrastructure. This capability can accelerate asset targeting and lateral movement during outage-style campaigns, making it significant for cyber-physical disruption efforts.
Related Threat Clusters
-
North Korean Hackers Launch Destructive Cyberattack on Smartphones and PCs
A North Korea-linked hacking group has executed a new cyberattack capable of remotely controlling Android smartphones and PCs, leading to data deletion and malware distribution. The attack, attributed to groups Kimsuky…
13 articles · Updated November 10, 2025 -
Five Plead Guilty in North Korean IT Worker Fraud Scheme
Five individuals have pleaded guilty to facilitating North Korean operatives in obtaining remote IT jobs at U.S. companies by using false and stolen identities. The U.S. Department of Justice has also seized $15 million…
39 articles · Updated November 17, 2025 -
FBI Alerts on Kimsuky Hackers Using QR Codes for Phishing Attacks
The FBI has issued a warning about the North Korean hacker group Kimsuky employing malicious QR codes in spear-phishing campaigns targeting U.S. organizations. The attacks focus on entities involved in North…
17 articles · Updated January 9, 2026 -
Lazarus Group Linked to $30M Upbit Hack in South Korea
South Korean authorities suspect that North Korea's Lazarus Group was behind a hack of Upbit, resulting in losses of approximately $30.4 million. The breach involved unusual activity in Solana tokens and led Upbit to…
100 articles · Updated November 28, 2025
Recent Intelligence Reports
- North Korea turns QR codes into phishing weapons — Theregister · January 9, 2026
- QR codes a powerful new phishing weapon in hands of Pyongyang cyberspies — Theregister · January 9, 2026
- North Korean spies turn Google's Find Hub into remote — Theregister · November 11, 2025
- N.Korean hackers launch “blackout” cyber blitz — Koreapost · November 10, 2025