This alert also includes suggested response actions to the IOCs provided, recommended mitigation techniques, and information on reporting incidents. This alert includes IOCs related to HIDDEN COBRA, IP addresses linked to systems infected with Volgmer malware, malware descriptions, and associated signatures. DHS and FBI are distributing these IP addresses to enable network defense and reduce exposure to North Korean government malicious cyber activity. įBI has high confidence that HIDDEN COBRA actors are using the IP addresses-listed in this report’s IOC files-to maintain a presence on victims’ networks and to further network exploitation.
For more information on HIDDEN COBRA activity, visit. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA. government partners, DHS and FBI identified Internet Protocol (IP) addresses and other indicators of compromise (IOCs) associated with a Trojan malware variant used by the North Korean government-commonly known as Volgmer. This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI).
0 kommentar(er)
