---
title: "US Sanctions Kimsuky, Ukraine Hacks Russia, Tree Breach: 2M, Cybersecurity News [November 27, 2023] | DuoCircle"
description: "The realm of cybersecurity is indeed dynamic, exciting, and continually evolving, and this week has been no exception."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-48-of-2023/"
---

Quick Answer

Four items shaped the week of November 27, 2023\. The US Treasury sanctioned eight North Korean agents and the Kimsuky hacking group for cyber-espionage operations supporting Pyongyang's weapons programs. Ukraine's military intelligence (HUR) claimed responsibility for a destructive cyberattack against Russia's Federal Air Transport Agency (Rosaviatsia) and leaked internal documents allegedly showing aviation safety problems. Dollar Tree disclosed a third-party data breach at service provider Zeroed-In Technologies that exposed personal data of approximately 2 million current and former employees. Google Drive users reported losing months of stored files, with Google acknowledging a sync bug in older desktop client versions and releasing recovery tooling rather than a full restore.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-48-of-2023%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=US%20Sanctions%20Kimsuky%2C%20Ukraine%20Hacks%20Russia%2C%20Tree%20Breach%3A%202M%2C%20Cybersecurity%20News%20%5BNovember%2027%2C%202023%5D&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-48-of-2023%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-48-of-2023%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-48-of-2023%2F&title=US%20Sanctions%20Kimsuky%2C%20Ukraine%20Hacks%20Russia%2C%20Tree%20Breach%3A%202M%2C%20Cybersecurity%20News%20%5BNovember%2027%2C%202023%5D "Share on Reddit") [ ](mailto:?subject=US%20Sanctions%20Kimsuky%2C%20Ukraine%20Hacks%20Russia%2C%20Tree%20Breach%3A%202M%2C%20Cybersecurity%20News%20%5BNovember%2027%2C%202023%5D&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-48-of-2023%2F "Share via Email") 

![cybersecurity](https://media.mailhop.org/duocircle/images/2023/12/spf-validator.jpg) 

The realm of [cybersecurity](/) is indeed dynamic, exciting, and continually evolving, and this week has been no exception. From Dollar Tree’s **data breaches** to the Russian Aviation hack, here’s the latest scoop on cybersecurity around the world.

## US Government Imposes Sanctions on North Korea’s Kimsuky Hacking Group

The Treasury Department Office of Foreign Assets Control (OFAC) recently **sanctioned** the [Kimsuky cybercriminal group](https://www.darkreading.com/cyberattacks-data-breaches/north-korea-s-kimsuky-doubles-down-on-remote-desktop-control).

The North Korean-backed hacking group stole intelligence in support of the country’s goals and faces sanctions along with 8 North Korean agents that facilitated the evasion and support of said country’s [Weapons of Mass Destruction (WMD)](https://en.wikipedia.org/wiki/Weapon%5Fof%5Fmass%5Fdestruction) programs. The threat actor group has been active **since 2012** and has been [insubordinate](https://home.treasury.gov/news/press-releases/jy1938) to the UN and US-designed Reconnaissance General Bureau (RGB).

The hacking group **started by targeting South Korean** government entities almost a decade ago, along with think tanks and experts, gradually extending operations to other nations like the US, Russia, Europe, and the UN. Kimsuky works with the goal of **harvesting intelligence** regarding [foreign policies and national security that concern the Korean peninsula](https://foreignpolicy.com/2023/04/17/north-korea-nuclear-cyber-crime-hackers-weapons/).

[![cybersecurity](https://media.mailhop.org/duocircle/images/2023/12/spf-record-check-7477.jpg)](https://media.mailhop.org/duocircle/images/2023/12/spf-record-check-7477.jpg)

The OFAC also sanctioned 4 Korean entities in May that were involved in **illicit IT work schemes** and [cyberattacks designed to generate revenue](https://www.infosecurity-magazine.com/news/north-korea-makes-50-income/) for the Democratic People’s Republic of Korea’s (DPRK) WMD programs.

## Ukraine Claims Responsibility for Hacking Russian Aviation Agency and Leaking Data

_Ukrainian intelligence has claimed that they have hacked Russia’s Federal Air Transport Agency._

The name of the Russian air agency is Rosaviatsia, and it is responsible for handling **Russia’s civil aviation industry**. Ukrainian intelligence [announced](https://gur.gov.ua/en/content/voienna-rozvidka-ukrainy-zdiisnyla-kiberspetsoperatsiiu-shchodo-rosaviatsii-sanktsii-pryskoriuiut-aviakolaps-rf.html) that they breached the agency and stole multiple documents. They also concluded that the Russian aviation sector is suffering due to sanctions and aircraft repairs.

Western sanctions on spares and software updates have hampered aircraft maintenance and the operators have been **forced to dismantle older aircraft** and use their parts to keep the newer fleets operational. What makes the news stand out is that it is the first case of a country openly admitting to a state-level hack.

The data obtained was [leaked on a file-sharing site](https://therecord.media/contractor-says-data-on-up-to-10-million-leaked-in-moveit-attack) and highlighted the scenario of Russian aviation’s one-and-a-half-year struggle. It shared reports of 185 accidents, a tripling of aircraft malfunctions over the time period, failures in Russia’s 220 Airbus planes, and much more.

## Dollar Tree Faces Third-Party Data Breach Affecting 2 Million Individuals

The discount store chain Dollar Tree suffered a [third-party data breach](https://www.prevalent.net/blog/third-party-data-breaches/) following the hack of service provider **Zeroed-In Technologies**.

[![Data Breaches](https://media.mailhop.org/duocircle/images/2023/12/spf-permerror-1.jpg)](https://media.mailhop.org/duocircle/images/2023/12/spf-permerror-1.jpg)

Dollar Tree has stores 23,000 stores in Canada and the US, making this breach a significant one. The [data breach](https://www.bbc.com/news/uk-england-northamptonshire-67304836) affected 1,977,486 people. Zeroed-In, the organization’s service provider, suffered a security incident in August 2023 where [threat actors](/data-privacy/intelbroker-threat-actors-steal-sensitive-data-of-11-million-weee-customers/) managed to make away with data. The data contained the [personal information](/email-security/9-best-practices-to-manage-sensitive-data-carefully/) of Dollar Tree and Family Dollar employees, which the threat actors have **now used to steal more information**.

The investigation is still ongoing. The information that was stolen includes names, birth dates, and Social Security Numbers (SSNs). The affected individuals are being [notified](https://www.documentcloud.org/documents/24177793-notice-of-data-event-zeroed-in-me) via emails that also include instructions on how the victims can enroll in **year-long identity protection** and credit monitoring.

Other customers of the [third-party service vendor](/email-security/why-you-need-to-prioritize-email-security-while-selecting-an-email-marketing-vendor/) have also been impacted by the data breach so it **would be best** to look around and exercise caution, especially with enhanced [phishing protection](/email/phishing-protection) measures. Consider bolstering your defenses further with comprehensive [phishing awareness training](/phishing-awareness-training) to ensure a proactive approach to security.

## Google Drive Users Express Frustration After Losing Months of Stored Data

People using Google Drive are reporting that their **recent files have disappeared**, and the cloud service has reverted to an older snapshot.

The issue started appearing in [forums](https://support.google.com/drive/thread/245055606?hl=en&msgid=245673190) last week. The people described how their data is getting lost, and folder structures are changing back to how they were in April-May 2023\. The activity **logs do not show any recent changes**, which means that this was not done accidentally by the users.

However, there is a problem with the service’s system. The organization’s volunteer support posted a response claiming that they are investigating the issue. A **fix is not yet available** to the public. _For those who have been affected, Google outlines that they should avoid making changes to the [root/data folder](https://developers.google.com/drive/api/guides/about-files#:~:text=Each%20user%20has%20a%20%22root,descends%20from%20this%20root%20folder.) until the fix is available._

Many individuals are frustrated by the loss of [important data](/email-security/data-privacy-and-protection-11-ways-to-protect-user-data/), as many of these were paying for the drive. Until a permanent solution comes out, it would be best to back up **important files locally** and contact Google Support.

## Topics

NewsSecurityUpdates 

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-48-of-2023%2F) [ ](https://twitter.com/intent/tweet?text=US%20Sanctions%20Kimsuky%2C%20Ukraine%20Hacks%20Russia%2C%20Tree%20Breach%3A%202M%2C%20Cybersecurity%20News%20%5BNovember%2027%2C%202023%5D&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-48-of-2023%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-48-of-2023%2F) Copy 

Related Articles

- [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg)  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)
- [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2022/01/spf-flattening-7011.jpg)  Cyber Security News Update, Week 1 of 2022 News ](/blog/announcements/cyber-security-news-update-week-1-of-2022/)
- [ ![Cybersecurity](https://media.mailhop.org/duocircle/images/2023/01/spf-validator-6824.jpg)  Cybersecurity News Update, Week 1 of 2023 News ](/blog/announcements/cyber-security-news-update-week-1-of-2023/)
- [ ![cybersecurity](https://media.mailhop.org/duocircle/images/2024/01/phishing-protection.jpg)  EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\] News ](/blog/announcements/cyber-security-news-update-week-1-of-2024/)

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 6m  Cyber Security News Update, Week 1 of 2022  Jan 7, 2022 ](/blog/announcements/cyber-security-news-update-week-1-of-2022/)[  News 7m  Cybersecurity News Update, Week 1 of 2023  Jan 1, 2023 ](/blog/announcements/cyber-security-news-update-week-1-of-2023/)[  News 5m  EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\]  Jan 4, 2024 ](/blog/announcements/cyber-security-news-update-week-1-of-2024/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"US Sanctions Kimsuky, Ukraine Hacks Russia, Tree Breach: 2M, Cybersecurity News [November 27, 2023]","description":"The realm of cybersecurity is indeed dynamic, exciting, and continually evolving, and this week has been no exception.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-48-of-2023/","datePublished":"2023-12-04T16:03:18.000Z","dateModified":"2025-05-14T11:58:09.000Z","dateCreated":"2023-12-04T16:03:18.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-48-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":740,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/12/spf-validator.jpg","caption":"cybersecurity","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"US Sanctions Kimsuky, Ukraine Hacks Russia, Tree Breach: 2M, Cybersecurity News [November 27, 2023]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-48-of-2023/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"US Sanctions Kimsuky, Ukraine Hacks Russia, Tree Breach: 2M, Cybersecurity News [November 27, 2023]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-48-of-2023/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"US Sanctions Kimsuky, Ukraine Hacks Russia, Tree Breach: 2M, Cybersecurity News [November 27, 2023]","description":"The realm of cybersecurity is indeed dynamic, exciting, and continually evolving, and this week has been no exception.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-48-of-2023/","datePublished":"2023-12-04T16:03:18.000Z","dateModified":"2025-05-14T11:58:09.000Z","dateCreated":"2023-12-04T16:03:18.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-48-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":740,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/12/spf-validator.jpg","caption":"cybersecurity","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```