Unverified50% confidenceFactExact time
This attack campaign shares extensive infrastructure overlap with recent supply chain attacks attributed to North Korea (DPRK), including an attack campaign targeting the NPM library Axios, using the same IP addresses.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/21/2026
First Seen
Valid until: 12/20/2026
Sources
Related Entities
Related Claims
Unverified被控路由器可被用于实施中间人攻击（MITM），劫持DNS解析将用户重定向至钓鱼站点64% similarUnverifiedEcosystems such as npm and PyPI have experienced supply chain attacks in which core packages were injected with malicious code or maintainer accounts were hijacked.62% similarUnverifiedThis social engineering technique is highly similar to the attack patterns used by North Korean APT organizations targeting developers and cryptocurrency practitioners.62% similarUnverifiedKRACK 攻击针对 Wi-Fi、BlueBorne 漏洞针对蓝牙协议栈、中间人攻击通过 NFC 实施，多种无线协议都被证明存在可利用的安全缺陷61% similarUnverifiedDDoS-as-a-Service (Booter/Stresser) offerings are available on platforms such as the dark web and Telegram, where attackers can pay a few dozen dollars to rent a botnet and launch attacks of hundreds of Gbps.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/938222API
curl https://kongchang.com/api/v1/knowledge/claims/938222MCP
get_claim(id=938222)