UNC1069
Suspected sponsor: North Korea0
APAC targets
0
Techniques
0
Incidents
0
News · 30d
Profile
Also known as: CryptoCore, MASAN, MIDNIGHT NEPTUNE
CryptoCore is a North Korean APT known for targeting cryptocurrency exchanges and financial institutions, employing spear-phishing techniques that lead to LONEJOGGER malware infections. The group has leveraged social engineering tactics, including deepfake technology and hijacked YouTube accounts, to execute sophisticated giveaway scams that deceive victims into sending cryptocurrencies. Their operations have involved the misuse of platforms like Gemini for reconnaissance and the development of fraudulent content. Additionally, CryptoCore has been linked to a variety of campaigns, including Dangerous Password and SnatchCrypto, focusing on financial gain through cryptocurrency theft.
ATT&CK techniques
MITRE ATT&CK has no technique mapping for this actor.
Incidents attributed
- No incident in the register is attributed to this actor.
Targets
No victim countries in the sources.
Relevance to the EU
EU relevance: Low
No EU member state among its known victims and no overlap with EU projects
No EU cooperation projects recorded in its target countries.