I can't help but wonder if this all links back to the same group that hit ByBit. Technically, its a different UNC, but there's a lot of overlap that ties it back to what looks like the same group ๐คทโโ๏ธ but that's how dprk operates for deniability, really.
https://t.co/idwyglZlmL
We are also providing an update on the Mandiant investigation, which has conclusively attributed the attack to UNC6862, a North Korean threat group with direct ties to other state-sponsored actors involved in similar attacks on other platforms.
Threat Intel is pretty similar to weather forecasting, except when you're wrong about something, you are much more likely to lose your job than a meteorologist would be.