North Korea exploits Itaewon tragedy for zero-day malware attack: Google



News North Korea exploits Itaewon tragedy for zero-day malware attack: Google Researchers say ScarCruft used deadly event as lure for phishing campaign targeting Internet Explorer vulnerability Ethan Jewell December 8, 2022 SHARE COPY LINK FACEBOOK X LINKEDIN MASTODON Overcrowding in the streets of Seoul's Itaewon district the night of the crush, Oct. 29, 2022 \| Image: Watchers Club (CC BY 3.0) North Korean hackers used the deadly crush in Seoul’s Itaewon district as a lure in a malicious phishing campaign, researchers said Wednesday, seeking to exploit a zero-day vulnerability against computers running Internet Explorer (IE). According to a blog post from Google’s Threat Analysis Group (TAG), users in South Korea began receiving suspicious rich text format (RTF) documents disguised as a press release about the tragedy on Oct. 31, just two days after more than 150 people lost their lives in the bustling nighttime district. When opened, the file fetches additional code from the web to Read More © Korea Risk Group. All rights reserved. No part of this content may be reproduced, distributed, or used for commercial purposes without prior written permission from Korea Risk Group. LATEST ANALYSIS 01How Assad’s downfall could expose secrets of North Korea-Syria military ties 02All the companies that participated in the Pyongyang Autumn Trade Fair 2024 03No Chinese firms joined North Korea’s latest trade fair dominated by Russia 04What defectors’ exam scores reveal about the quality of North Korean health care 05North Korean Il-76 cargo planes make rare flights to northeast coast 06From aid to academia: The status of foreign organizations in North Korea 07North Korea expanding rail access to airport near Wonsan mega resort: Imagery 08Assad’s fall deprives North Korea of a fellow pariah, but its focus is elsewhere

News

North Korea exploits Itaewon tragedy for zero-day malware attack: Google

Researchers say ScarCruft used deadly event as lure for phishing campaign targeting Internet Explorer vulnerability

Ethan Jewell December 8, 2022

North Korea exploits Itaewon tragedy for zero-day malware attack: Google

Overcrowding in the streets of Seoul's Itaewon district the night of the crush, Oct. 29, 2022 | Image: Watchers Club (CC BY 3.0)

North Korean hackers used the deadly crush in Seoul’s Itaewon district as a lure in a malicious phishing campaign, researchers said Wednesday, seeking to exploit a zero-day vulnerability against computers running Internet Explorer (IE).

According to a blog post from Google’s Threat Analysis Group (TAG), users in South Korea began receiving suspicious rich text format (RTF) documents disguised as a press release about the tragedy on Oct. 31, just two days after more than 150 people lost their lives in the bustling nighttime district.

When opened, the file fetches additional code from the web to

01How Assad’s downfall could expose secrets of North Korea-Syria military ties
02All the companies that participated in the Pyongyang Autumn Trade Fair 2024
03No Chinese firms joined North Korea’s latest trade fair dominated by Russia
04What defectors’ exam scores reveal about the quality of North Korean health care
05North Korean Il-76 cargo planes make rare flights to northeast coast
06From aid to academia: The status of foreign organizations in North Korea
07North Korea expanding rail access to airport near Wonsan mega resort: Imagery
08Assad’s fall deprives North Korea of a fellow pariah, but its focus is elsewhere

North Korea exploits Itaewon tragedy for zero-day malware attack: Google

LATEST ANALYSIS

Similar Articles

About the Author

Ethan Jewell