The North Korean malware attack against Seoul-based DailyNK has spread across multiple companies that accessed the website over the past few months, cybersecurity firm Kaspersky has told NK News. 

The infections contradict Daily NK’s claim that hackers inserted the malicious code on pages only accessible to its own staff, and raises questions about the organization’s decision to keep its readers in the dark about the security breach. 

Senior Kaspersky Security Researcher Seongsu Park said the malware, which another firm dubbed “Bluelight” and attributed to the DPRK-linked hacking group APT37, had infected several companies