Hackread.com and others report DPRK-linked activity using GitHub infrastructure and lure files like fake PDFs and LNKs to spy on South Korean firms, showing GitHub as recurring C2 or staging in nation-state tradecraft.
Researchers spot North Korean hackers using GitHub and fake PDFs to spy on South Korean firms in a high-severity cyber campaign.
North Korean Hackers Abuse GitHub to Spy on South Korean Firms
How DPRK actors use LNK files and GitHub C2 to evade detection and maintain persistence
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security