Maintenance in progress

two years of covert access to north korean command-and-control infrastructure revealed operators inside 1,640 companies across 57 countries, with root-level breaches at 700–800 organizations; fake job interviews were the main entry method and crypto theft the main goal. separately an extortion crew registered phishing domains named for their targets in a voice-phishing campaign against blackstone, kkr and cme, and a ransomware group claimed the law firm mayer brown. the pattern across all three is targeting of the institutions that hold deal and litigation files rather than the money directly.

threat intelligence disclosures