ACTIVE NORTH KOREAN CAMPAIGN TARGETING SECURITY RESEARCHERS

Summary from the TLDR InfoSec newsletter

North Korean threat actors have been targeting security researchers for the past two and a half years using 0-day exploits. Google’s Threat Analysis Group has tracked and disrupted campaigns from these actors and recently discovered a new campaign likely from the same actors. The threat actors used social media sites to build rapport with their targets before sending a malicious file that contained at least one 0-day in a popular software package.