National Cyber Awareness System: North Korean Malicious Cyber Activity

10/31/2019 11:30 AM EDT

Original release date: October 31, 2019
The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) have identified a Trojan malware variant—referred to as HOPLIGHT—used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA.

CISA encourages users and administrators to review Malware Analysis Reports MAR-10135536-8 and the page on HIDDEN COBRA – North Korean Malicious Cyber Activity for more information.