ClosedHighNo fix needed
Day · Jul 20, 2023
JumpCloud breached by North Korean hackers to reach crypto customers
JumpCloud (directory / device management SaaS)
Updates on Jul 20, 2023
SentinelOne links the intrusion infrastructure to North Korean APT activity
Source
Summary
A spear-phishing attack let a nation-state actor into JumpCloud's infrastructure. The attacker abused its command framework to target a small set of customers. JumpCloud force-rotated all customer API keys, and researchers tied the attack to North Korea, aimed at crypto companies.
Read the full incident →
