Google Threat Analysis Group has detailed a new campaign where the North Korean state-backed hackers are targeting security researchers through social media . While asking them to collaborate on researching the new exploits, they’re sending them software and URLs that install backdoors on systems, probably for stealing their research work.
Security Researchers Targeted With a Backdoor Campaign
Hunting the hunter is a different game, which is now played by North Korean state-backed hackers as spotted by Google’s Threat Analysis Group . They detailed a campaign where the security researchers are being targeted on various social media platforms like Keybase, LinkedIn, Twitter, E-mail, Discord, and Telegram.
New blog post from TAG with details of a North Korean campaign targeting security researchers working on vulnerability research and development. https://t.co/Ec2TaMMXeQ Stay safe out there everyone! — Shane Huntley (@ShaneHuntley) January 26, 2021