Post by Mandiant (part of Google Cloud) on X
Mandiant (part of Google Cloud)@Mandiant
XNorth Korea threat actor UNC5342 is using EtherHiding, the first time we have observed a nation-state use this technique. 🚨
The TTP is being used in a social engineering campaign that leads to cryptocurrency heists and espionage.
Read the blog post: t.co

229 likes0 repliesPosted Oct 17, 2025