Trusted Design

TA17-164A: HIDDEN COBRA

概要

This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the tools and infrastructure used by cyber actors of the North Korean government to target the media, aerospace, financial, and critical infrastructure sectors in the United States and globally. Working with U.S. Government partners, DHS and FBI identified Internet Protocol (IP) addresses associated with a malware variant, known as DeltaCharlie, used to manage North Korea’s distributed denial-of-service (DDoS) botnet infrastructure. This alert contains indicators of compromise (IOCs), malware descriptions, network signatures, and host-based rules to help network defenders detect activity conducted by the North Korean government.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• TA17-164A - HIDDEN COBRA DDoS Botnet Infrastructure (score: 0.98)
• HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure (score: 0.94)
• TA17-164A: HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure (score: 0.92)
• Hidden Cobra (score: 0.80)
• HIDDENCOBRA (score: 0.77)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る