PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

TraderTraitor: Deep Dive

wiz.io | research | #cloud | #supply-chain | #threat-intelligence | #cryptocurrency | #apt | #north-korea | #lazarus | #traderraitor
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz Threat Research profiles TraderTraitor, the North Korean Lazarus subgroup behind the $1.5B Bybit hack and DMM's $308M heist — tracing its shift from phishing to supply-chain and cloud attacks.
Published
Collected

Related coverage

research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
research · volexity.com
3CX Supply Chain Compromise Leads to ICONIC Incident
[Update: Following additional analysis of shellcode used in ICONIC, in conjunction with other observations from the wider security community, Volexity now attributes the activity described in this post to the […]
research · volexity.com
Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS
In late 2021, Volexity discovered an intrusion in an environment monitored as part of its Network Security Monitoring service. Volexity detected a system running frp, otherwise known as fast reverse […]
research · volexity.com
North Korean BLUELIGHT Special: InkySquid Deploys RokRAT
In a recent blog post, Volexity disclosed details on a portion of the operations by a North Korean threat actor it tracks as InkySquid. This threat actor compromised a news […]
research · volexity.com
Storm Cloud Unleashed: Tibetan Focus of Highly Targeted Fake Flash Campaign
Beginning in May 2019, Volexity started tracking a new series of strategic web compromises that have been used in highly targeted attacks against Tibetan individuals and organizations by a Chinese […]
research · volexity.com
OceanLotus Blossoms: Mass Digital Surveillance and Attacks Targeting ASEAN, Asian Nations, the Media, Human Rights Groups, and Civil Society
In May 2017, Volexity identified and started tracking a very sophisticated and extremely widespread mass digital surveillance and attack campaign targeting several Asian nations, the ASEAN organization, and hundreds of […]
Back