Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This analysis details updates to Hangro, North Korea's state VPN and mail system infrastructure, spanning North Korean, Russian, and Chinese network address spaces. The service uses a certificate hierarchy with cryptographic anomalies and supports bulk mail transfers over intermittent connections. The infrastructure has evolved from a commercial email gateway to a certificate-bound VPN service for trade representatives. Network assignments linked to Silibank and infrastructure in the Russian Far East have been identified. The system employs large message limits and ETRN capabilities for mail relay.

Hangro is a North Korean state-operated VPN and mail product with infrastructure distributed across North Korean, Russian, and Chinese IP address spaces. A new certificate hierarchy deployed in July 2026 shows cryptographic anomalies where signatures fail verification, differing from the 2024 version. The infrastructure includes six network assignments in Chinese address space linked to Silibank and networks in the Russian Far East designated KPOST. Originally a commercial email gateway from 2001, Hangro evolved into a certificate-bound VPN issued to trade representatives via consulates. The mail system is configured for bulk transfers over intermittent connections, supporting ten gigabyte message limits and ETRN capabilities.

Detailed information about North Korea's Hangro Revisited. Get real-time updates, technical details, and mitigation strategies.

North Korea's Hangro Revisited - Live Threat Intelligence - Threat Radar | OffSeq.com

North Korea's Hangro Revisited

Threats Tagged 'north korea networks'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'north korea networks'

Lead Pen Test Professional