"North Korean Threat Actor Targets Cryptocurrency With New Methodologies"

A new report by researchers at Proofpoint describes a state-sponsored North Korean threat actor that has been actively targeting cryptocurrency holders and exchanges with new methods. The gang, known as TA444, has been operating since at least 2017 and began focusing on cryptocurrency in 2022. It shares similarities with the public activities of APT38, Bluenoroff, BlackAlicanto, Stardust Chollima, and COPERNICIUM, and it is suspected of funneling funds to North Korea or its foreign handlers. What makes TA444 interesting is that it applies a greater diversity of delivery techniques and payloads than other groups. In order to trap victims, the group also uses blockchain-related lures, fake employment listings for major companies, and more. This article continues to discuss the tactics, capabilities, and targets of the TA444 group.

SiliconANGLE reports "North Korean Threat Actor Targets Cryptocurrency With New Methodologies"