North Korea led the world in nation-state hacking in Q2 and Q3

“North Korean-affiliated groups dominate the threat detection landscape,” Trellix said in its new report. The infamous Lazarus Group tops the list, accounting for 8.6% of Trellix’s detections, with Andariel and Kimsuky taking second and third place, respectively. 

Together, groups affiliated with North Korea account for 18.2% of all the nation-state-aligned activity that Trellix identified.

Trellix said the finding “represents a significant escalation” in North Korea’s cyber activity, and it noted that the country’s operatives are pursuing careful and difficult-to-detect intrusion strategies, including remote IT worker schemes.

Read more at Cybersecurity Dive