"A Pain in the Mist: Navigating Operation DreamJob’s arsenal" published by OrangeCyberdefense. #DreamJob, #MISTPEN, #UNC2970, #DPRK, #CTI www.orangecyberdefense.com/global/blog/cert-news/a-...

Our analysis covers updated #BURNBOOK and #MISTPEN variants, that feature slight changes in their main routines and C2 loop.
UNC2970 relied on compromised infrastructure on SharePoint and WordPress, aligning with previous findings.

North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN Malware North Korean hackers use job-themed phishing to deploy the MISTPEN backdoor, targeting global aerospace and energy sectors.

North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN Malware
thehackernews.com/2024/09/nort...
#Infosec #Security #Cybersecurity #CeptBiro #NorthKoreanHackers #EnergyAndAerospaceIndustries #MISTPEN #Malware