North Korean state-sponsored cyber actor, TA406, is carrying out phishing attacks and credential-stealing operations against Ukrainian government entities to gather intelligence on the Russian invasion, according to Proofpoint. The group’s tactics involve deploying emails impersonating staff from non-existent organizations and directing recipients to download malicious files. Some of the data collected includes system information and antivirus software details.

Foxconn Confirms Cyberattack, Security Experts Discuss
Foxconn confirmed a cyberattack has disrupted some of its North American facilities


