Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries

North Korea’s Hangro platform has exposed an unusually detailed view of infrastructure used to connect officials and trade representatives abroad with systems inside the country. A newly observed TLS certificate listed servers in North Korea and Russia, along with an internal address that should not have appeared in a public-facing certificate. Hangro is not malware or a conventional cyberattack tool. It is a state-linked VPN client that also includes email and real-time chat functions, reportedly intended for North Korean personnel outside the country. Its servers provide a rare technical trail into how overseas users may reach domestic services, unlike the North Korean fake worker campaigns that typically rely on stolen...

Read the full article at the source.