#Diamond Sleet

#Diamond Sleet

North Korean threat group Diamond Sleet (Zinc) breached a Taiwanese software company and used their systems to distribute malware.

The hackers added malicious code to a legitimate application installer and signed it with a valid CyberLink certificate.

Microsoft has not observed any direct interaction with compromised systems but warns that the threat actor is known for stealing data and establishing persistent access. [ more ]

North Korean threat group Diamond Sleet (Zinc) breached a Taiwanese software company and used their systems to distribute malware.

The hackers added malicious code to a legitimate application installer and signed it with a valid CyberLink certificate.

Microsoft has not observed any direct interaction with compromised systems but warns that the threat actor is known for stealing data and establishing persistent access. [ more ]

North Korean hackers have compromised CyberLink, a Taiwanese software maker, to distribute a modified installer as part of a supply-chain attack.

The trojanized installer has been detected on more than 100 devices in multiple countries.

Microsoft attributes the attack to a North Korean nation-state actor known as Diamond Sleet. [ more ]