HIDDENCOBRA (APT38) Responsible for 100M USD Cyberheist Against Blockchain Provider | allinfosecnews.com

Jan. 25, 2023, 4:04 a.m. |

FortiGuard Labs | FortiGuard Center - Threat Signal Report fortiguard.fortinet.com

Earlier the FBI announced that HIDDEN COBRA (also known as APT38/LAZARUS) is behind the latest cyberheist of 100M against cryptocurrency blockchain provider Horizon Bridge, which is a U.S. based startup owned by Harmony. The assets stolen by Lazarus were cryptocurrency coins - Ethereum, Binance Coin, Tether, USD Coin, and DAI.HIDDEN COBRA is a state sponsored organization headed by the North Korean government.What are the Technical Details of this Attack?HIDDEN COBRA used a combination of targeted attacks, specifically spearphishing campaigns designed …

apt38 assets attack binance binance coin blockchain bridge cobra cryptocurrency cyberheist dai ethereum fbi government harmony hidden horizon latest lazarus north north korean organization responsible sponsored startup state state sponsored stolen technical tether

More from fortiguard.fortinet.com / FortiGuard Labs | FortiGuard Center - Threat Signal Report

ArcaneDoor Attack (CVE-2024-20353 and CVE-2024-20359) 1 day, 18 hours ago | fortiguard.fortinet.com

adaptive security advisory april arcanedoor +22

Akira Ransomware Attack (CVE-2023-20269 and CVE-2020-3259) 1 day, 18 hours ago | fortiguard.fortinet.com

access advisory akira akira ransomware +17

PAN-OS Critical Flaw in GlobalProtect Gateway (CVE-2024-3400) 1 week, 3 days ago | fortiguard.fortinet.com

advisory attack code code injection +27

XZ Utils Supply Chain Attack (CVE-2024-3094) 3 weeks, 1 day ago | fortiguard.fortinet.com

attack code compression cve +25

Nice Linear eMerge Command Injection Vulnerability (CVE-2019–7256) 4 weeks, 1 day ago | fortiguard.fortinet.com

access attacker code code execution +25

Jenkins Arbitrary File Read Vulnerability (CVE-2024-23897) 4 weeks, 2 days ago | fortiguard.fortinet.com

access application application developers attackers +31

Kimsuky Malware Attack 1 month ago | fortiguard.fortinet.com

attack cyber entities espionage +15

JetBrains TeamCity Authentication Bypass Vulnerabilities (CVE-2024-27198, CVE-2024-27199) 1 month, 1 week ago | fortiguard.fortinet.com

attacker authentication authentication bypass bypass +15

ConnectWise ScreenConnect Vulnerabilities (CVE-2024-1708 and CVE-2024-1709) 1 month, 4 weeks ago | fortiguard.fortinet.com

access advisory application attackers +28

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Security Compliance Architect - Experian Health (Can be REMOTE from anywhere in the US)

@ Experian | ., ., United States

View on infosec-jobs.com

IT Security Specialist

@ Ørsted | Kuala Lumpur, MY

View on infosec-jobs.com

Senior, Cyber Security Analyst

@ Peloton | New York City

View on infosec-jobs.com

Cyber Security Engineer | Perimeter | Firewall

@ Garmin Cluj | Cluj-Napoca, Cluj County, Romania

View on infosec-jobs.com

Pentester / Ethical Hacker Web/API - Vast/Freelance

@ Resillion | Brussels, Belgium

View on infosec-jobs.com