The Hacker Newsinfo@thehackernews.com (The Hacker News)
Jade Sleet Breach Exposes Backdoors and Rising AI Threats
Part of the TraderTraitor story · since 9 Mar
- Mon 9 Mar, 16:26 UTC. The Hacker News, first report. North Korea's UNC4899 uses AI IDE backdoor to seize crypto funds.
- Tue 21 Apr, 10:21 UTC. SecurityWeek, its first report on the story. North Korea linked hackers steal $290M from Kelp DAO DeFi.
- Tue 21 Apr, 19:27 UTC. Security Affairs, its first report on the story. Lazarus Group siphons $290M from Kelp DAO via LayerZero exploit.
- Thu 23 Apr, 15:01 UTC. The Hacker News. North Korean hackers steal $290m via LayerZero KelpDAO breach.
- Fri 1 May, 21:31 UTC. Dark Reading, its first report on the story. North Korea Holds 76% of Stolen Crypto in 2026 After Big Hacks.
- Mon 7 Sep, 11:26 UTC. Infosecurity, its first report on the story. Researchers Map Lazarus Into Six North Korean Cyber Units.
- Mon 21 Sep, 06:21 UTC. The Hacker News. Jade Sleet Breach Exposes Backdoors and Rising AI Threats. This article, 7th of 32.
- Mon 28 Sep, 02:30 UTC. SecurityOnline, its first report on the story. North Korean Hackers Hide macOS Backdoors in Fake Coding Tests.
- Mon 12 Oct, 09:11 UTC. SecurityOnline. Fake Terraform AWS provider installs backdoors on developer systems.
- Thu 29 Oct, 18:30 UTC. Microsoft, its first report on the story. Microsoft reports North Korean groups expanding AI operations.
- Fri 30 Oct, 08:30 UTC. SecurityWeek. North Korea’s TraderTraitor linked to $6.36 billion Binance heist.
- Fri 30 Oct, 09:00 UTC. SecurityOnline. Binance probe traces $6.36 billion hack to DevOps breach.
- Fri 30 Oct, 09:30 UTC. SOCRadar, its first report on the story. Binance reports $6.3 billion theft from its hot wallets.
- Fri 30 Oct, 12:00 UTC. Infosecurity. Analysts attribute Binance’s $6.3bn hack to North Korean group.
- Fri 30 Oct, 13:00 UTC. Malwarebytes, its first report on the story. Binance reports $6.3 billion theft linked to North Korean group.
- Fri 30 Oct, 14:30 UTC. Ars Technica, its first report on the story. TRM Labs links record $6.3 billion Binance heist to North Korea.
- Fri 30 Oct, 19:30 UTC. Security Affairs. TRM Labs attributes $6.3 billion Binance theft to North Korea.
- Sun 1 Nov, 08:30 UTC. The Hacker News. FBI blames North Korea group for $6.43 billion Binance heist.
- Sun 1 Nov, 09:55 UTC. cybersixt, its first report on the story. Binance cyberattack: how North Korea launders the stolen $6.4B.
- Sun 1 Nov, 20:30 UTC. Security Affairs. FBI blames North Korea linked group for Binance theft.
- Mon 2 Nov, 09:00 UTC. SecurityOnline. North Korean groups use AI to accelerate cyber operations.
- Mon 2 Nov, 09:30 UTC. SecurityWeek. FBI Links North Korea’s TraderTraitor to Binance Heist.
- Mon 2 Nov, 11:00 UTC. Infosecurity. FBI links Binance crypto breach to North Korea’s TraderTraitor.
- Mon 2 Nov, 19:30 UTC. The Hacker News. FBI blames North Korean TraderTraitor for $6.43 billion heist.
- Mon 2 Nov, 23:30 UTC. Dark Reading. Binance Hack Shows How One Laptop Led to Billions in Losses.
- Tue 3 Nov, 10:30 UTC. SecurityOnline. FBI attributes $6.3 billion Binance heist to North Korea.
- Wed 4 Nov, 10:00 UTC. SecurityWeek. North Korea protests US claims linking hackers to Binance heist.
- Wed 4 Nov, 11:30 UTC. SecurityWeek. Binance details $6.34 billion theft linked to North Korean group.
- Wed 4 Nov, 17:00 UTC. Ars Technica. Binance says hackers planned $6.3 billion crypto heist for months.
- Wed 11 Nov, 12:00 UTC. SOCRadar. FBI attributes $6.3 billion Binance theft to North Korea. Cites a CVE in CISA KEV.
- Fri 13 Nov, 03:00 UTC. SecurityWeek. FBI Seizes $1.2 Billion in Cryptocurrency Stolen From Binance.
- Fri 13 Nov, 03:31 UTC. SecurityOnline. DOJ Disrupts North Korean Crypto Theft Schemes and Seizes $1.2B.
The article discusses a cybersecurity breach linked to the Indian IT provider Jade Sleet, which involved backdoors named FLATROOF and ROOFDECK. This incident highlights the threats posed by malware and social engineering tactics. Key points include the increasing complexity of cyber attacks, the importance of validating security measures, and the need for robust defenses against AI-powered threats.
Various resources and webinars on topics like identity security and risk assessment are also promoted to help organizations enhance their cybersecurity posture.
How the story developed
32 articles from 11 outlets since 9 Mar. Picked up again on 11 Nov after 7 days quiet. This was the 7th report, 196 days after the first.
- Mon 9 Mar, 16:26 UTC. The Hacker News, first report. North Korea's UNC4899 uses AI IDE backdoor to seize crypto funds.
- Tue 21 Apr, 10:21 UTC. SecurityWeek, its first report on the story. North Korea linked hackers steal $290M from Kelp DAO DeFi.
- Tue 21 Apr, 19:27 UTC. Security Affairs, its first report on the story. Lazarus Group siphons $290M from Kelp DAO via LayerZero exploit.
- Thu 23 Apr, 15:01 UTC. The Hacker News. North Korean hackers steal $290m via LayerZero KelpDAO breach.
- Fri 1 May, 21:31 UTC. Dark Reading, its first report on the story. North Korea Holds 76% of Stolen Crypto in 2026 After Big Hacks.
- Mon 7 Sep, 11:26 UTC. Infosecurity, its first report on the story. Researchers Map Lazarus Into Six North Korean Cyber Units.
- Mon 21 Sep, 06:21 UTC. The Hacker News. Jade Sleet Breach Exposes Backdoors and Rising AI Threats. This article, 7th of 32.
- Mon 28 Sep, 02:30 UTC. SecurityOnline, its first report on the story. North Korean Hackers Hide macOS Backdoors in Fake Coding Tests.
- Mon 12 Oct, 09:11 UTC. SecurityOnline. Fake Terraform AWS provider installs backdoors on developer systems.
- Thu 29 Oct, 18:30 UTC. Microsoft, its first report on the story. Microsoft reports North Korean groups expanding AI operations.
- Fri 30 Oct, 08:30 UTC. SecurityWeek. North Korea’s TraderTraitor linked to $6.36 billion Binance heist.
- Fri 30 Oct, 09:00 UTC. SecurityOnline. Binance probe traces $6.36 billion hack to DevOps breach.
- Fri 30 Oct, 09:30 UTC. SOCRadar, its first report on the story. Binance reports $6.3 billion theft from its hot wallets.
- Fri 30 Oct, 12:00 UTC. Infosecurity. Analysts attribute Binance’s $6.3bn hack to North Korean group.
- Fri 30 Oct, 13:00 UTC. Malwarebytes, its first report on the story. Binance reports $6.3 billion theft linked to North Korean group.
- Fri 30 Oct, 14:30 UTC. Ars Technica, its first report on the story. TRM Labs links record $6.3 billion Binance heist to North Korea.
- Fri 30 Oct, 19:30 UTC. Security Affairs. TRM Labs attributes $6.3 billion Binance theft to North Korea.
- Sun 1 Nov, 08:30 UTC. The Hacker News. FBI blames North Korea group for $6.43 billion Binance heist.
- Sun 1 Nov, 09:55 UTC. cybersixt, its first report on the story. Binance cyberattack: how North Korea launders the stolen $6.4B.
- Sun 1 Nov, 20:30 UTC. Security Affairs. FBI blames North Korea linked group for Binance theft.
- Mon 2 Nov, 09:00 UTC. SecurityOnline. North Korean groups use AI to accelerate cyber operations.
- Mon 2 Nov, 09:30 UTC. SecurityWeek. FBI Links North Korea’s TraderTraitor to Binance Heist.
- Mon 2 Nov, 11:00 UTC. Infosecurity. FBI links Binance crypto breach to North Korea’s TraderTraitor.
- Mon 2 Nov, 19:30 UTC. The Hacker News. FBI blames North Korean TraderTraitor for $6.43 billion heist.
- Mon 2 Nov, 23:30 UTC. Dark Reading. Binance Hack Shows How One Laptop Led to Billions in Losses.
- Tue 3 Nov, 10:30 UTC. SecurityOnline. FBI attributes $6.3 billion Binance heist to North Korea.
- Wed 4 Nov, 10:00 UTC. SecurityWeek. North Korea protests US claims linking hackers to Binance heist.
- Wed 4 Nov, 11:30 UTC. SecurityWeek. Binance details $6.34 billion theft linked to North Korean group.
- Wed 4 Nov, 17:00 UTC. Ars Technica. Binance says hackers planned $6.3 billion crypto heist for months.
- Wed 11 Nov, 12:00 UTC. SOCRadar. FBI attributes $6.3 billion Binance theft to North Korea. Cites a CVE in CISA KEV.
- Fri 13 Nov, 03:00 UTC. SecurityWeek. FBI Seizes $1.2 Billion in Cryptocurrency Stolen From Binance.
- Fri 13 Nov, 03:31 UTC. SecurityOnline. DOJ Disrupts North Korean Crypto Theft Schemes and Seizes $1.2B.
- Known exploited CVE
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 32 articles as a listHide the list
- Mon 9 MarDay 01
- North Korea's UNC4899 uses AI IDE backdoor to seize crypto funds16:26 · The Hacker News · First report
Quiet for 6 weeks
Tue 21 AprDay 432- North Korea linked hackers steal $290M from Kelp DAO DeFi10:21 · SecurityWeek · Picked up again
- Lazarus Group siphons $290M from Kelp DAO via LayerZero exploit19:27 · Security Affairs
Quiet for 2 days
Thu 23 AprDay 451- North Korean hackers steal $290m via LayerZero KelpDAO breach15:01 · The Hacker News
Quiet for 8 days
Fri 1 MayDay 531- North Korea Holds 76% of Stolen Crypto in 2026 After Big Hacks21:31 · Dark Reading · Picked up again
Quiet for 18 weeks
Mon 7 SepDay 1821- Researchers Map Lazarus Into Six North Korean Cyber Units11:26 · Infosecurity · Picked up again
Quiet for 2 weeks
Mon 21 SepDay 1961- Jade Sleet Breach Exposes Backdoors and Rising AI Threats06:21 · The Hacker News · Picked up again · This article, 7th of 32
Quiet for 7 days
Mon 28 SepDay 2031- North Korean Hackers Hide macOS Backdoors in Fake Coding Tests02:30 · SecurityOnline · Picked up again
Quiet for 2 weeks
Mon 12 OctDay 2171- Fake Terraform AWS provider installs backdoors on developer systems09:11 · SecurityOnline · Picked up again
Quiet for 2 weeks
Thu 29 OctDay 2341- Microsoft reports North Korean groups expanding AI operations18:30 · Microsoft · Picked up again
- Fri 30 OctDay 2357
- North Korea’s TraderTraitor linked to $6.36 billion Binance heist08:30 · SecurityWeek
- Binance probe traces $6.36 billion hack to DevOps breach09:00 · SecurityOnline
- Binance reports $6.3 billion theft from its hot wallets09:30 · SOCRadar
Show 4 more from 30 Oct
- Analysts attribute Binance’s $6.3bn hack to North Korean group12:00 · Infosecurity
- Binance reports $6.3 billion theft linked to North Korean group13:00 · Malwarebytes
- TRM Labs links record $6.3 billion Binance heist to North Korea14:30 · Ars Technica
- TRM Labs attributes $6.3 billion Binance theft to North Korea19:30 · Security Affairs
Quiet for 2 days
Sun 1 NovDay 2373- FBI blames North Korea group for $6.43 billion Binance heist08:30 · The Hacker News
- Binance cyberattack: how North Korea launders the stolen $6.4B09:55 · cybersixt
- FBI blames North Korea linked group for Binance theft20:30 · Security Affairs
- Mon 2 NovDay 2385
- North Korean groups use AI to accelerate cyber operations09:00 · SecurityOnline
- FBI Links North Korea’s TraderTraitor to Binance Heist09:30 · SecurityWeek
- FBI links Binance crypto breach to North Korea’s TraderTraitor11:00 · Infosecurity
Show 2 more from 2 Nov
- FBI blames North Korean TraderTraitor for $6.43 billion heist19:30 · The Hacker News
- Binance Hack Shows How One Laptop Led to Billions in Losses23:30 · Dark Reading
- Tue 3 NovDay 2391
- FBI attributes $6.3 billion Binance heist to North Korea10:30 · SecurityOnline
- Wed 4 NovDay 2403
- North Korea protests US claims linking hackers to Binance heist10:00 · SecurityWeek
- Binance details $6.34 billion theft linked to North Korean group11:30 · SecurityWeek
- Binance says hackers planned $6.3 billion crypto heist for months17:00 · Ars Technica
Quiet for 7 days
Wed 11 NovDay 2471- FBI attributes $6.3 billion Binance theft to North Korea12:00 · SOCRadar · Exploited CVE · Picked up again · Known exploited CVE
Quiet for 2 days
Fri 13 NovDay 2492- FBI Seizes $1.2 Billion in Cryptocurrency Stolen From Binance03:00 · SecurityWeek
- DOJ Disrupts North Korean Crypto Theft Schemes and Seizes $1.2B03:31 · SecurityOnline