The Lazarus Group is behind a social engineering campaign that uses repository invitations and malicious npm packages to target developers on GitHub.

The post GitHub Developers Targeted by North Korea’s Lazarus Group appeared first on Security Boulevard.

When North Korean threat actors the Lazarus Group exploited a legitimate update to the 3CXDesktopApp—a softphone application from 3CX—security professionals didn’t initially pick up on the import of the activity and tactics that signaled the attack. In fact, according to CrowdStrike, which discovered the attack, even experienced security professionals pooh-poohed detections as false positives. And..

The post Lazarus Assault Via 3CX Exposes Need to Rethink Security appeared first on Security Boulevard.

Hey, hey, DPRK, how many people will you scam today?

The post Warning: N. Korean Job Scams Push Trojans via LinkedIn appeared first on Security Boulevard.

The post U.S. Indicts North Korean Hackers in Theft of $200 Million appeared first on Security Boulevard.

The post Ransomware Victims That Pay Up Could Incur Steep Fines from Uncle Sam appeared first on Security Boulevard.

The post Lazarus Group May Have Hacked Indian Nuclear Power Plant appeared first on Security Boulevard.

The post Jackson County pays ransomware operators $400k to regain access to computers appeared first on Security Boulevard.

In an unusual move, the Lazarus hacking group associated with the North Korean government has recently started targeting organizations from Russia. The group’s primary targets until now have been organizations from countries with which North Korea has geopolitical tensions, such as South Korea, Japan and the United States. Researchers from Check Point Software Technologies found..

The post North Korean Lazarus Group Starts Targeting Russian Organizations appeared first on Security Boulevard.

A new unpatched vulnerability in Windows has been disclosed along with proof-of-concept exploit code. It could allow hackers to more easily install malware on computers, but it requires user interaction. The vulnerability was discovered by a security researcher named John Page, aka hyp3rlinx, who reported it to Microsoft in August through Trend Micro’s Zero Day..

The post Windows VCF Zero-Day Exploit Allows Remote Code Execution appeared first on Security Boulevard.

The post Cloud Hosting Provider DataResolution.net Battling Christmas Eve Ransomware Attack appeared first on Security Boulevard.