Google Researcher Finds Link Between WannaCry Attacks and North Korea

So far, nobody had an idea that who was behind WannaCry ransomware attacks?

But now there is a clue that lies in the code.

Neel Mehta, a security researcher at Google, found evidence that suggests the WannaCry ransomware, that infected 300,000 machin… Continue reading Google Researcher Finds Link Between WannaCry Attacks and North Korea

Researchers: WannaCry ransomware shares code with North Korean malware

The ransomware known as WannaCry that spread rapidly to 300,000 machines in 150 countries over the past few days shares code with malware written by a group of North Korean hackers known as the Lazarus Group. While the shared code is important, experts warned that it’s far from proof about who created and launched the ransomware attacks. Neel Mehta, a security researcher at Google, first pointed out the shared code on Monday on Twitter. The link was quickly echoed by numerous other experts. Shared code between an early, Feb 2017 Wannacry cryptor and a Lazarus group backdoor from 2015 found by @neelmehta from Google. pic.twitter.com/hmRhCSusbR — Costin Raiu (@craiu) May 15, 2017 Similitude between #WannaCry and Contopee from Lazarus Group ! thx @neelmehta – Is DPRK behind #WannaCry ? pic.twitter.com/uJ7TVeATC5 — Matthieu Suiche (@msuiche) May 15, 2017 “From a technical point of view those two functions and their references are identical,” said […]

The post Researchers: WannaCry ransomware shares code with North Korean malware appeared first on Cyberscoop.

Continue reading Researchers: WannaCry ransomware shares code with North Korean malware

North Korea’s plan to cultivate an army of cybercrime masterminds

In the shadow of nuclear weapons, bank robberies tend to be forgotten. In North Korea’s case, the two are closely connected. Conventional wisdom says North Korea is an arsenal-craving backwater under the rule of despots. The regime, however, is driving toward a modern version of authoritarianism, with cyberwar capabilities complementing hydrogen bombs. While the nukes purposefully grab the world’s attention, the regime is taking unprecedented steps in the cyber domain. And it’s targeting more than just its critics. It’s been just over one year since the collective known as Lazarus Group stole $81 million from the central bank of Bangladesh in a heist that ran through the Federal Reserve Bank of New York. The theft, one of the biggest bank robberies in modern history, initially targeted $1 billion but came up well short because of a simple typo during the online bank transfer process. It’s now the subject of a federal inquiry looking into […]

The post North Korea’s plan to cultivate an army of cybercrime masterminds appeared first on Cyberscoop.

Continue reading North Korea’s plan to cultivate an army of cybercrime masterminds

Opsec fail allows researchers to track Bangladesh Bank hack to North Korea

A computer in North Korea was used to launch one of the most high profile cyberattacks in recent memory, enabling hackers to break into the Federal Reserve Bank of New York and steal $81 million from Bangladesh Bank, according to new research conducted by Moscow-based Kaspersky Lab. Kaspersky published original details about the incident Monday during the first day of a security conference hosted by the company on the Caribbean island of St. Maarten. An apparent and rare operational security mistake made by the advanced hacking group, known as Lazarus Group, allowed researcher to spot a connection that existed between a compromised European server — used by the group to launch its attacks — and an internet address owned by North Korea’s only internet service provider. The hackers reportedly failed to scrub log files on the European server, leaving a trail of digital bread crumbs back to the foreign computer. […]

The post Opsec fail allows researchers to track Bangladesh Bank hack to North Korea appeared first on Cyberscoop.

Continue reading Opsec fail allows researchers to track Bangladesh Bank hack to North Korea

APT Attackers Flying More False Flags Than Ever

Investigators continue to focus on attack attribution, but Kaspersky researchers speaking at CanSecWest 2016 caution that attackers are manipulating data used to tie attacks to perpetrators. Continue reading APT Attackers Flying More False Flags Than Ever