Trusted Design

HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure

概要

Overview This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the tools and infrastructure used by cyber actors of the North Korean government to target the media, aerospace, financial, and critical infrastructure sectors in the United States and globally. Working with U.S. Government partners, DHS and FBI identified Internet Protocol (IP) addresses associated with a malware variant, known as DeltaCharlie, used to manage North Korea’s distributed denial-of-service (DDoS) botnet infrastructure. This alert contains indicators of compromise (IOCs), malware descriptions, network signatures, and host-based rules to help network defenders detect activity conducted by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• TA17-164A - HIDDEN COBRA DDoS Botnet Infrastructure (score: 0.97)
• TA17-164A: HIDDEN COBRA (score: 0.94)
• TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure (score: 0.93)
• Hidden Cobra (score: 0.84)
• HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure | US-CERT (score: 0.82)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る