IOC's for Hidden Cobra have been released

The United States Computer Emergency Readiness Team (US CERT) released updated indicators of compromise (IOCs) for HIDDEN COBRA on Nov 14th of this year, giving organizations more ways to detect this malware in their environment. The Department of Homeland Security and the FBI have identified new Internet Protocol (IP) addresses and other IOCs associated with a Trojan malware variant used by the North Korean government, commonly known as Volgmer. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA.

According to the alert, the FBI has high confidence that HIDDEN COBRA threat actors are using the IP addresses identified to infiltrate victims’ networks, maintain a presence, and conduct further network exploitation. DHS and FBI are distributing these IP addresses to enable network defense and reduce exposure to North Korean government malicious cyber activity.

To see more, please click on the link below.

Stay safe

\m/