North Korean state-sponsored hacker group APT37 has conducted a spear phishing campaign targeted at North Korean activists. Disguised as academic invitations from a South Korean think-tank, the emails contain Dropbox links that direct victims to download malware-infected compressed archives. Genians Security Center analyzed this sophisticated cyber attack, dubbed “Operation: ToyBox Story.” The ongoing use of Airbnb for command and control infrastructure is making differentiation between malicious and legitimate traffic increasingly difficult.

GP2GP likely to be phased out and more briefs
Te Whatu Ora plans to address risks of the outdated GP2GP electronic record system until a new digital health record launches midyear. In Western Australia,