North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance.
The Chinese spying group, dubbed UNC2814, is quite prolific and has been targeting telecom firms, though it's separate from China's notorious Salt Typhoon.