Google Says It Thwarted North Korean Cyberattacks in Early 2022

Google's Threat Analysis Group announced on Thursday that it had discovered a pair of North Korean hacking cadres going by the monikers Operation Dream Job and Operation AppleJeus in February that were leveraging a remote code execution exploit in the Chrome web browser. From a report: The blackhatters reportedly targeted the US news media, IT, crypto and fintech industries, with evidence of their attacks going back as far as January 4th, 2022, though the Threat Analysis Group notes that organizations outside the US could have been targets as well.

"We suspect that these groups work for the same entity with a shared supply chain, hence the use of the same exploit kit, but each operate with a different mission set and deploy different techniques," the Google team wrote on Thursday. "It is possible that other North Korean government-backed attackers have access to the same exploit kit." Operation Dream Job targeted 250 people across 10 companies with fraudulent job offers from the likes of Disney and Oracle sent from accounts spoofed to look like they came from Indeed or ZipRecruiter. Clicking on the link would launch a hidden iframe that would trigger the exploit.

Same "group" of hackers?

[Chumm]

All jokes aside, Kim's probably just trying to find new ways to bring income into the country. I doubt he allows many people access to the time, tools, and resources needed to learn how to hack, let alone pull something off.

Re:

[Virtucon]

He has China fronting for him to avoid sanctions and for its part, China gets to play "peacemaker" to the rest of the world brokering deals that benefit them both when the DPRK misbehaves.

Oh yeah and there was a new missile launch this week, how are those sanctions working out there UN?