SEAL Intel

Following a recent axios npm package compromise, DPRK (UNC1069) is expanding beyond the crypto sector - we are publishing 164 IOCs and detailing their currently active social engineering approaches.

Technical dive into North Korean VS Code Abuse tactics used for Contagious Interview. DPRK IT Workers trail included.

Uncovering a massive crypto drainer spreading vector through the impersonation of thousands of official protocol support channels on Telegram.

The ongoing monitoring of DPRK IT workers' networks reveals the pivot from remote "workers" to "recruiters" with the goal of scaling operations.

Examples of recent X.com phishing campaigns leading to account's takeover.

Your guide to the ever-evolving tactics of crypto drainer campaigns.