JumpCloud Intrusion | Attacker Infrastructure Links Compromise to North Korean APT Activity

In recent news, the cloud-based IT management service JumpCloud publicly shared details gathered from the investigation into an intrusion on their network. Alongside the updated details, the organization shared a list of associated indicators of compromise (IOCs), noting attribution to an unnamed “sophisticated nation-state sponsored threat actor”.

Reviewing the newly released indicators of compromise, we associate the cluster of threat activity to a North Korean state sponsored APT. The IOCs are linked to a wide variety of activity we …

actor apt attribution cloud cloud-based compromise indicators of compromise infrastructure intrusion investigation iocs it management jumpcloud links list malware analysis management nation network north north korean north korean apt organization service sponsored state state sponsored threat threat actor