"ESET APT Activity Report Q2 2025–Q3 2025" published by ESET. #APTDown, #DeceptiveDevelopment, #Lazarus, #Trend, #Kimsuky, #Konni, #DPRK, #CTI www.welivesecurity.com/en/eset-research/eset-ap...

GitHub - reversinglabs/reversinglabs-yara-rules: ReversingLabs YARA Rules ReversingLabs YARA Rules. Contribute to reversinglabs/reversinglabs-yara-rules development by creating an account on GitHub.

#WeaselStore is an #infostealer used by the #APT group #DeceptiveDevelopment, which targets developers on multiple systems in web & cryptocurrency. Protect yourself by deploying our public #YARArules: https://bit.ly/3x34FdW

DeceptiveDevelopment NK Actor Analysis

~Eset~
North Korea-aligned actor DeceptiveDevelopment targets developers with fake jobs and multi-platform malware for financial gain.
-
IOCs: 103. 231. 75. 101, 45. 159. 248. 110, 45. 8. 146. 93
-
#DeceptiveDevelopment #NorthKorea #ThreatIntel

Original post on esecurityplanet.com

Inside North Korea’s DeceptiveDevelopment Job Fraud, Malware Scheme DeceptiveDevelopment blends job fraud and malware, using social engineering and insider tactics to compromise developers and cr...

#News #Threats #cyber #attacks #DeceptiveDevelopment […]

[Original post on esecurityplanet.com]

Il gruppo nordcoreano DeceptiveDevelopment unisce malware, social engineering e AI deception con lavoratori IT fasulli, creando un nuovo ibrido tra cybercrime e insider threat.

#AI #BeaverTail #CoreadelNord #DeceptiveDevelopment #Lazarus #TsunamiKit
www.matricedigitale.it/2025/09/25/d...

"ESET APT Activity Report Q4 2024–Q1 2025" published by ESET. #Bybit, #DeceptiveDevelopment, #Kimsuky, #Konni, #Trend, #DPRK, #CTI www.welivesecurity.com/en/eset-research/eset-ap...

Original post on securityweek.com

Freelance Software Developers in North Korean Malware Crosshairs ESET says hundreds of freelance ...

www.securityweek.com/freelance-software-devel...

#Malware #& #Threats #Nation-State #AnyDesk […]

[Original post on securityweek.com]

Hackers pose as employers to steal crypto, login credentials - Help Net Security DeceptiveDevelopment targets freelance software developers through spearphishing on job-hunting sites, aiming to steal cryptocurrency.

ハッカーが雇用主を装って暗号通貨やログイン認証情報を盗む

Hackers pose as employers to steal crypto, login credentials #HelpNetSecurity (Feb 20)

#DeceptiveDevelopment #偽求人 #暗号通貨窃取 #マルウェア #サイバー攻撃

"DeceptiveDevelopment targets freelance developers" published by ESET. #BeaverTail, #DeceptiveDevelopment, #InvisibleFerret, #DPRK, #CTI www.welivesecurity.com/en/eset-research/decepti...

DeceptiveDevelopment targets freelance developers ESET researchers have observed a cluster of North Korea-aligned activities that they named DeceptiveDevelopment and where its operators pose as headhunters and serve their targets with software projec...

#ESETresearch analyzed a campaign by #DeceptiveDevelopment targeting developers with trojanized coding tests. Posing as recruiters, the operators approach their targets on job-hunting platforms, aiming to steal their cryptocurrency wallets and more.
www.welivesecurity.com/en/eset-rese...
🧵 1/6