A North Korean government-backed APT actor targets organisations in South Korea and the US
A North Korean government-backed APT actor targeting government and military personnel in South Korea and the US
A North Korean government-backed threat actor has been linked to attacks targeting government and military personnel, think tanks, policymakers, academics, and researchers in South Korea and the US.
Google’s Threat Analysis Group (TAG) is tracking the cluster under the name ARCHIPELAGO, which it said is a subset of another threat group tracked by Mandiant under the name APT43. The tech giant said it began monitoring the hacking crew in 2012, adding it has ‘observed the group target individuals with expertise in North Korea policy issues such as sanctions, human rights, and non-proliferation issues.’