56,966 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a07df4-c5af-7113-90fb-a884c9758048

DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

Rapid7 Blog · published 4 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at rapid7.com Wayback capture

3blogs citing

First cited: 7 Sept 2026
Most recent: 21 Sept 2026
Rank this month: not ranked
Links from this post: 9
Words captured: 5,303

Cited by

Blog

In the post

Date

How to prove your HAProxy build is legitimate Read at the source ↗

21 Sept 2026

krypt3ia.wordpress.com

Weekly ALL-SOURCE Cyber Warfare Intelligence Brief September 8, 2026 Read at the source ↗

8 Sept 2026

Risky Bulletin: BEC campaign steals €35 million from French notaries Read at the source ↗

7 Sept 2026

Links from this post

Link

Host

https://threatfox.abuse.ch/browse/tag/RicochetChollima/

threatfox.abuse.ch

https://github.com/stamparm/maltrail/blob/master/trails/static/malware/apt_37.txt

github.com

https://www.enki.co.kr/en/media-center/blog/analysis-of-kimsuky-s-attack-on-a-south-korean-groupware-vendor-using-a-new-gomir-family-variant

enki.co.kr

https://image.ahnlab.com/atip/content/file/20241126/(ENG%20ver

image.ahnlab.com

Operation SyncHole: Lazarus APT goes back to the well Read at the source ↗

https://cloud.google.com/blog/topics/threat-intelligence/north-korea-cyber-structure-alignment-2023

cloud.google.com

https://ics-cert.kaspersky.com/publications/reports/2023/09/25/apt-and-financial-attacks-on-industrial-organizations-in-h1-2023/

ics-cert.kaspersky.com

Andariel’s silly mistakes and a new malware family Read at the source ↗

Funnull Resurfaces: Exposing RingH23 Arsenal and MacCMS Supply Chain Attacks Read at the source ↗

blog.xlab.qianxin.com