The North Korean advanced persistent threat (APT) group “ZINC” has been targeting cyber-security professionals with social engineering that leads to malware delivery. Although no loss of data has been publicly confirmed, ZINC was probably trying to steal sensitive information about vulnerabilities, exploits, and offensive hacking tools. The targets would certainly possess invaluable, privileged information and tools that, in the wrong hands, could leave craters in the cyber-threat landscape. This example of threat-hunters becoming the hunted shows that almost any individual or organization―even one with a mature cyber-security posture―is fair game when it comes to cyber attacks.
Digital Shadows
Threat Intelligence and Digital Risk Protection Resources
