Researchers: WannaCry ransomware shares code with North Korean malware
The ransomware known as WannaCry that spread rapidly to 300,000 machines in 150 countries over the past few days shares code with malware written by a group of North Korean hackers known as the Lazarus Group. While the shared code is important, experts warned that it’s far from proof about who created and launched the ransomware attacks. Neel Mehta, a security researcher at Google, first pointed out the shared code on Monday on Twitter. The link was quickly echoed by numerous other experts. Shared code between an early, Feb 2017 Wannacry cryptor and a Lazarus group backdoor from 2015 found by @neelmehta from Google. pic.twitter.com/hmRhCSusbR — Costin Raiu (@craiu) May 15, 2017 Similitude between #WannaCry and Contopee from Lazarus Group ! thx @neelmehta – Is DPRK behind #WannaCry ? pic.twitter.com/uJ7TVeATC5 — Matthieu Suiche (@msuiche) May 15, 2017 “From a technical point of view those two functions and their references are identical,” said […]
The post Researchers: WannaCry ransomware shares code with North Korean malware appeared first on Cyberscoop.
Continue reading Researchers: WannaCry ransomware shares code with North Korean malware