It’s called TA406, a new cyber threat from North Korea, which is typically used in espionage.
Thanks to the cybersecurity experts of Proofpoint, we know that there are several cybercriminal campaigns underway on the net. Many of them, analyzed during 2021, would seem to be linked to TA406. It is an actor already known to security experts, because it is generally used for espionage campaigns by North Korea. TA406 does not usually employ malware, but is used in cybercrime and sextortion. However, two notable 2021 campaigns, attributed to this group, attempted to distribute malware that could be used for the collection of sensitive information.
Throughout 2021, Proofpoint took over campaigns of credential theft in progress launched by TA406. Analysts had already observed such campaigns as early as 2018. These were generally low-volume, at least until earlier this year. In fact, from January to June 2021, Proofpoint observed almost weekly campaigns. These were mainly aimed at foreign policy experts, journalists and non-governmental organizations (ONG).
The in-depth report on the work and dissemination of TA406 is available on the official Proofpoint website.
Read also: Young student in North Korea shot for selling copies of Squid Game
Instant GamingFor the month of May, PS Plus goes straight online: among the free games,…
Madame Web, the Sony Spider-Man spin-off film starring Dakota Johnson coming to Netflix, but when?After…
Canon celebrates the 20th anniversary of the SELPHY series, the range of compact photo printers…
That Miami GP will be a new beginning for McLaren, which has entered into a…
With the latest update, WhatsApp has introduced some interesting innovations - some quite eye-catching, such…
Initially born as a subscription service with benefits for GTA Online, GTA+ is renewed offering…