Click here to download all references as Bib-File.•
| 2026-05-01
⋅
kmsec
⋅
North Korea's abuse of Cloudflare Workers and Pages PylangGhost |
| 2026-03-13
⋅
kmsec
⋅
First instance of PylangGhost RAT observed on npm PylangGhost |
| 2026-02-26
⋅
kmsec
⋅
Novel DPRK stager using Pastebin and text steganography |
| 2026-02-22
⋅
kmsec
⋅
Tracking DPRK operator IPs over time |
| 2026-02-21
⋅
kmsec
⋅
DPRK tests Google Drive as a malware stager |
| 2026-02-16
⋅
kmsec
⋅
Exposed DPRK reference malware and logs |
| 2026-02-13
⋅
kmsec
⋅
VMWare artifacts left by a FAMOUS CHOLLIMA operator |
| 2026-01-19
⋅
kmsec
⋅
npm package bigmathix and the BigSquatRat campaign behind it |