North Korean APT Group Uses Russian Internet Infrastructure

A new expert analysis of the North Korean APT group Void Dokkaebi. The study shows how the group specifically uses Russian Internet infrastructure to perform crypto thefts and spying operations while maintaining anonymity. Trend Micro's experts reveal that Void Dokkaebi serves a complex infrastructure consisting of Russian and North Korean IP addresses, VPNs and proxies, and uses fake companies as well as social engineering tactics to compromise…