Tag: sanctions evasion

3 Attack Reports | 0 Vulnerabilities

Attack reports

Cyber-Enabled Maritime Sanctions Evasion

Iranian and Russian shadow fleet vessels are utilizing sophisticated online infrastructure consisting of over 36 inauthentic websites to facilitate sanctions evasion. These websites impersonate ship registries, national maritime administrations, seafarer training organizations, protection and indem…
typosquatting
sanctions evasion
document forgery
2026-06-11
fraudulent registries
iranian operations
maritime fraud
russian operations
shadow fleet
Published: June 11, 2026
Downloadable IOCs: 2

Unmasking DPRK Cyber Threat Actors: Fake IT Worker Infrastructure

Investigation of DPRK-linked fake IT worker infrastructure began after cryptocurrency researcher ZachXBT identified domain luckyguys[.]site connected to illicit payments. Analysis of 30 days of network activity associated with IP 163.245.219[.]19 revealed concentrated VPN usage patterns, with Astri…
dprk
sanctions evasion
fake it workers
astrill vpn
cryptocurrency fraud
residential proxies
2026-04-23
freelance platforms
vpn infrastructure
Published: April 23, 2026
Downloadable IOCs: 2

North Korean remote workers landing jobs in the West

North Korean threat actors are utilizing Contagious Interview and WageMole campaigns to secure remote employment in Western countries, evading financial sanctions. The Contagious Interview campaign has been updated with improved script obfuscation and multi-platform support, targeting over 100 devi…
social engineering
cryptocurrency
data theft
beavertail
contagious interview
invisibleferret
2024-11-06
wagemole
sanctions evasion
remote work
job fraud
Published: November 6, 2024
Downloadable IOCs: 56
Click here to see more Attack Reports