{"id":1180055,"date":"2023-09-07T18:05:27","date_gmt":"2023-09-07T22:05:27","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1180055"},"modified":"2023-09-07T18:05:27","modified_gmt":"2023-09-07T22:05:27","slug":"north-korea-backed-hackers-target-security-researchers-with-0-day","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1180055","title":{"rendered":"North Korea-backed hackers target security researchers with 0-day"},"content":{"rendered":"<div id=\"rss-wrap\">\n<figure class=\"intro-image intro-left\">\n  <img decoding=\"async\" src=\"https:\/\/www.prime-wow.com\/wp-content\/uploads\/2023\/09\/north-korea-hacker-800x533-1.jpg\" alt=\"North Korea-backed hackers target security researchers with 0-day\" \/><\/p>\n<p class=\"caption\" style=\"font-size:0.8em\"><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2021\/01\/north-korea-hacker.jpg\" class=\"enlarge-link\" data-height=\"1414\" data-width=\"2121\">Enlarge<\/a> (credit: Dmitry Nogaev | Getty Images)<\/p>\n<\/figure>\n<div><a name=\"page-1\" \/><\/div>\n<p>North Korea-backed hackers are once again targeting security researchers with a zero-day exploit and related malware in an attempt to infiltrate computers used to perform sensitive investigations involving cybersecurity.<\/p>\n<p>The presently unfixed zero-day\u2014meaning a vulnerability that\u2019s known to attackers before the hardware or software vendor has a security patch available\u2014resides in a popular software package used by the targeted researchers, Google researchers <a href=\"https:\/\/blog.google\/threat-analysis-group\/active-north-korean-campaign-targeting-security-researchers\/\">said Thursday<\/a>. They declined to identify the software or provide details about the vulnerability until the vendor, which they privately notified, releases a patch. The vulnerability was exploited using a malicious file the hackers sent the researchers after first spending weeks establishing a working relationship.<\/p>\n<p>Malware used in the campaign closely matches code used in a previous campaign that was definitively tied to hackers backed by the North Korean government, Clement Lecigne and Maddie Stone, both researchers in Google\u2019s Threat Analysis Group, said. That campaign first came to public awareness in January 2021 in posts from the <a href=\"https:\/\/blog.google\/threat-analysis-group\/new-campaign-targeting-security-researchers\/\">same Google research group<\/a> and, a few days later, <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/01\/28\/zinc-attacks-against-security-researchers\/\">Microsoft<\/a>.<\/p>\n<\/div>\n<p><a href=\"https:\/\/arstechnica.com\/?p=1966395#p3\">Read 7 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1966395&amp;comments=1\">Comments<\/a><\/p>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: Ars Technica &#8211; <a href=\"https:\/\/arstechnica.com\/?p=1966395\" target=\"_blank\" rel=\"noopener\">North Korea-backed hackers target security researchers with 0-day<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enlarge (credit: Dmitry Nogaev | Getty Images) North Korea-backed hackers are once again targeting security researchers with a zero-day exploit and related malware in an attempt to infiltrate computers used to perform sensitive investigations involving cybersecurity. The presently unfixed zero-day\u2014meaning &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1180055\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1180056,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-1180055","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1180055","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1180055"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1180055\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1180056"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1180055"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1180055"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1180055"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}