#north-korea

2 articles

News2

Developer workspace showing code repositories and job sites with suspicious elements

North Korean Hackers Use Fake Next.js Repos in Job Scams

North Korean threat actors deploy malicious Next.js repositories through fake job recruitment campaigns to gain persistent access to developer systems.

Feb 25, 05:42 PM2 min

Cybersecurity analysts monitoring Lazarus Group ransomware campaign on multiple screens

High

Cyber Attacks

Lazarus Group 2026: North Korea Deploys Medusa Ransomware and Backdoors in Global Cyberattacks

In 2026, North Korea's Lazarus Group expanded its arsenal by integrating Medusa ransomware, the Blindingcan RAT, and Comebacker backdoor in global cyberattack campaigns targeting finance, defense, and critical infrastructure worldwide. Security researchers from Dark Reading confirm this major tactical evolution.

Feb 24, 10:18 PM2 min