Post

I spent nearly 4 months investigating the inner workings of a North Korean state-sponsored hacking group. Here's what I learned: 🧵 - The group used generative AI tools to aid in almost every part of their operation. - They exfiltrated 26,584 cryptocurrency wallets from 2,726 victim systems. 1/3

- In several cases, the threat actors set up entire front companies to lure in software developers via job listings promising high salaries. - The attackers would hide their malware inside 'skills assessments' send out to applicants as part of an elaborate fake technical interview process. 2/3

- The threat actors successfully pulled off a supply-chain attack by compromising the developer of a VS Code extension and injecting it with malware. - Mass layoffs across tech likely contributed to the success of the hacker's elaborate scheme. Full article: expel.com/blog/inside-... 3/3

This was fascinating, thanks for the well written analysis, Marcus

Thanks! I really appreciate the compliment :)

Remember that I still owe you a drink anytime you’re in Seattle for sinkholing wannacry 😅