Security Market Segment LS
Thursday, 09 August 2018 23:01

North Korean cyber attackers share code: McAfee

By

Security company McAfee says it has found previously undiscovered links among malware thought to originate in North Korea.

Months of research have revealed "connections between the many attacks attributed to North Korea" and allowed categorisation of "different tools used by specific teams of their cyber army", according to McAfee's Jay Rosenberg and Christiaan Beek.

According to the researchers, North Korea is involved in cyber crime to bring in foreign currency as well as "nationalist aims" such as intelligence gathering and disrupting rival states.

"We focused in our research on the larger-scale nationalism-motivated campaigns, in which we discovered many overlaps in code reuse. We are highly confident that nation-state–sponsored groups were active in these efforts," the two researchers said.

Analysis of thousands of samples revealed "a significant amount of code similarities between almost every one of the attacks associated with North Korea".

Many of those similarities had not been seen before, they claimed, and "some of these attacks and malware have not been linked to one another, at least publicly".

Some of this common code was found in malware dating from 2009 to 2017.

McAfee identified commonalities between the Dark Hotel attacks reported by Kaspersky in 2014 (but which had been going on for more than seven years) with malware attributed to North Korea.

"We clearly saw a lot of code reuse over the many years of cyber campaigns we examined. This indicates the North Koreans have groups with different skills and tools that execute their focused parts of cyber operations while also working in parallel when large campaigns require a mix of skills and tools."

BUSINESS WORKS BETTER WITH WINDOWS 1O. MAKE THE SHIFT

You cannot afford to miss this Dell Webinar.

With Windows 7 support ending 14th January 2020, its time to start looking at your options.

This can have significant impacts on your organisation but also presents organisations with an opportunity to fundamentally rethink the way users work.

The Details

When: Thursday, September 26, 2019
Presenter: Dell Technologies
Location: Your Computer

Timezones

QLD, VIC, NSW, ACT & TAS: 11:00 am
SA, NT: 10:30 am
WA: 9:00 am NZ: 1:00 pm

Register and find out all the details you need to know below.

REGISTER!

ADVERTISE ON ITWIRE NEWS SITE & NEWSLETTER

iTWire can help you promote your company, services, and products.

Get more LEADS & MORE SALES

Advertise on the iTWire News Site / Website

Advertise in the iTWire UPDATE / Newsletter

Promote your message via iTWire Sponsored Content/News

Guest Opinion for Home Page exposure

Contact Andrew on 0412 390 000 or email [email protected]

OR CLICK HERE!

Stephen Withers

joomla visitors

Stephen Withers is one of Australia¹s most experienced IT journalists, having begun his career in the days of 8-bit 'microcomputers'. He covers the gamut from gadgets to enterprise systems. In previous lives he has been an academic, a systems programmer, an IT support manager, and an online services manager. Stephen holds an honours degree in Management Sciences and a PhD in Industrial and Business Studies.

VENDOR NEWS & EVENTS

REVIEWS

Recent Comments