North Korean threat actors are using fake Terraform job tests to compromise macOS developers and reach cloud systems. The campaign shows how a routine coding assignment can become an entry point for data theft, remote control, and deeper network intrusion. The activity is tied to TraderTraitor, a financially motivated Lazarus subgroup also tracked as UNC4899, PUKCHONG, and Jade Sleet. It follows a major incident involving LayerZero, and investigators found an unrelated Indian IT services provider affected by the backdoors. SentinelLABS said in a report shared with Cyber Security News (CSN) that the attackers expanded their focus beyond crypto firms. The finding shows North Korean operators pursue developers, cloud...
Läs hela artikeln hos källan.
Kommentarer (0)
Inga kommentarer ännu. Bli först med att kommentera!