Skip to content

CyberSIXT Search

Threat actor

UNC1069

Tracked by CyberSIXT since 11 Feb · last activity 7 Sep

articles · all time: 13+0 this week
outlets: 7
week of 30 Mar · busiest week: 5

13 articles from 7 outlets since 11 Feb; the latest 48 days ago.

Article
First report

Show as table

UNC1069: articles
Published (UTC)	Outlet	Headline
Mon 7 Sep · 11:26 UTC	Infosecurity	Researchers Map Lazarus Into Six North Korean Cyber Units
Mon 13 Apr · 08:18 UTC	The Hacker News	OpenAI Revokes macOS Signing Key After Axios Supply Chain Hack
Mon 6 Apr · 21:51 UTC	Dark Reading	North Korean hackers compromise Axios NPM via social engineering
Mon 6 Apr · 14:52 UTC	The Hacker News	North Korea hackers hijack Axios npm package, push WAVESHAPER.V2
Mon 6 Apr · 11:32 UTC	SecurityWeek	North Korean hackers target Node.js maintainers after Axios hack
Fri 3 Apr · 12:31 UTC	The Hacker News	North Korean hackers trick npm maintainer to hijack Axios package
Wed 1 Apr · 14:52 UTC	Security Affairs	Google Attributes Axios npm Attack to North Korean UNC1069 Hackers
Wed 1 Apr · 14:20 UTC	SANS ISC	TeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows, (Wed, Apr 1st)
Wed 1 Apr · 08:27 UTC	The Hacker News	Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069
Tue 31 Mar · 21:34 UTC	Dark Reading	Axios NPM Package Compromised in Precision Attack
Wed 11 Feb · 22:40 UTC	Dark Reading	North Korea's UNC1069 Hammers Crypto Firms With AI
Wed 11 Feb · 07:20 UTC	The Hacker News	North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations
Wed 11 Feb · 01:15 UTC	SecurityOnline	Fake CEO, Real Hack: North Korea Uses AI Deepfakes to Steal Crypto

Who reported 7 outlets, last 12 months

The Hacker News5
Dark Reading3
SecurityOnline1
SANS ISC1
Security Affairs1
SecurityWeek1
Infosecurity1

See the full timeline

CVEs

No CVE is named alongside UNC1069 in CyberSIXT coverage.

Coverage

13 articles, all timeFull timeline RSS feed

7 SepResearchers Map Lazarus Into Six North Korean Cyber UnitsInfosecurity
13 AprOpenAI Revokes macOS Signing Key After Axios Supply Chain HackThe Hacker News
6 AprNorth Korean hackers compromise Axios NPM via social engineeringDark Reading
6 AprNorth Korea hackers hijack Axios npm package, push WAVESHAPER.V2The Hacker News
6 AprNorth Korean hackers target Node.js maintainers after Axios hackSecurityWeek
3 AprNorth Korean hackers trick npm maintainer to hijack Axios packageThe Hacker News
1 AprGoogle Attributes Axios npm Attack to North Korean UNC1069 HackersSecurity Affairs
1 AprTeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows, (Wed, Apr 1st)SANS ISC
1 AprGoogle Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069The Hacker News
31 MarAxios NPM Package Compromised in Precision AttackDark Reading
11 FebNorth Korea's UNC1069 Hammers Crypto Firms With AIDark Reading
11 FebNorth Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency OrganizationsThe Hacker News
11 FebFake CEO, Real Hack: North Korea Uses AI Deepfakes to Steal CryptoSecurityOnline · first in our coverage