Nation-states Hackers Use Goldbackdoor Malware to Target Journalists

24
Nation-states Hackers Use Goldbackdoor Malware to Target Journalists

Sophisticated hackers associated with the North Korean government are actively targeting journalists using a sophisticated malware called Goldbackdoor.

The attacks have taken the shape of a multistage infection campaign aimed at stealing sensitive information from targets. The campaign is likely to have begun in March and is still underway, according to researchers. Stairwell researchers investigated a tip from South Korea’s NK News that a North Korean APT known as APT37 had taken information from the private computer of a former South Korean intelligence official.

The threat actor – also known as Ricochet Collima, InkySquid, Reaper, or ScarCruft – attempted to imitate NK News and spread unique malware in an attempt to target journalists who used the official as a source.

Read More: https://threatpost.com/hackers-target-journalists-goldbackdoor/179389/