Tag: DPRK
A lighter stealer called WeaselBiscuit turns up in 13 npm packages
A small JavaScript stealer with fingerprints of North Korean developer-targeting campaigns has been found riding a cluster of malicious packages.
Fake macOS update pages drop crypto stealers in DPRK campaign
North Korea-linked actors are using fake full-screen macOS updates to push ClickFix-style clipboard attacks.