Researchers track new North Korean hacker group

 

Researchers have tracked a new self-funded North Korean hacker group that uses crypto-jacking to pay for espionage campaigns on behalf of the North Korean regime.  The group has been using false monikers to hide its activity. The group, tracked as APT43, is a state-backed actor whose activities have sometimes been attributed to actors named Kimsuky and Thallium. The threat actor is believed to be linked to the Reconnaissance General Bureau, North Korea’s main foreign intelligence service.  APT43 is known for its spear-phishing campaigns, supported by social engineering and false email addresses. Researchers claim that its goal is to steal valuable information regarding foreign policy, nuclear security issues, and healthcare.