

120. North Korea’s ScarCruft gang is behind some very crafty phishin’ campaigns
5 snips Apr 9, 2024
Discover the secretive world of North Korean hackers ScarCruft and their crafty phishing campaigns targeting journalists, dissidents, and cybersecurity experts. Explore their intricate tactics, social engineering skills, and potential diplomatic implications. Learn about cybersecurity partnerships, journalist security, privacy legislation, and FTC actions against online scams.
AI Snips
Chapters
Transcript
Episode notes
Daily NK's Unique Reporting
- The Daily NK is a small, scrappy digital newspaper reporting on North Korea with half its staff defectors.
- They provide unique insights on North Korean life, like secret food prices, that Kim Jong Un tries to keep hidden.
ScarCruft's Stealthy Watering Hole Attack
- ScarCruft employs watering hole attacks to spy quietly without damage or ransom demands.
- They target Daily NK readers too, planting malicious code in outdated browsers to capture data.
ScarCruft's Personalized Phishing
- ScarCruft prioritizes intelligence gathering by researching their targets deeply before attacking.
- They craft highly believable, personalized phishing emails to maximize success without generic spam tactics.