HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure | US-CERT

US‑CERT Alert TA17‑164A (HIDDEN COBRA) details North Korean government cyber operations using the DeltaCharlie DDoS botnet to target media, aerospace, financial, and critical infrastructure sectors worldwide; the alert provides technical analysis, IOCs (CSV/STIX), network signatures, YARA rules, CVE references, and recommended mitigation and response actions for network defenders.