Phishing for secrets: Russian cyber experts believe defense industry is being attacked by North Korea
Added 10-19-20 06:37:02am EST - “A hacker group from North Korea has been attacking Russian military and industrial organizations by sending fraudulent emails, according to cybersecurity experts, who believe that Pyongyang is beginning to cast its net wider.” - Rt.com
CLICK TO SHARE
This may come as a surprise to some, as Russia is one of very few countries with no hostility towards Pyongyang, which has very few allies on the world stage.
Speaking to Moscow daily Kommersant, experts explained that hacker group Kimsuky had attempted to collect confidential information from aerospace and defense companies through phishing attacks.
A phishing attack, typically sent via email, sees the hackers attempting to create an official-looking message, normally from the target's employer, with the goal of encouraging the user to enter their login and password, thereby handing the information to the sender. The details could then be used to look at the worker's emails, potentially compromising secrets.
According to Anastasia Tikhonova, head of the complex threat research department at Group-IB, Kimsuky was initially focused on South Korean targets but has since broadened the scope of its operation. In recent times, the group has also attacked military industry companies in Ukraine, Slovakia, and Turkey.
Also speaking to Kommersant, Denis Legezo, a cybersecurity expert at Russian software company Kaspersky Lab, explained that North Korean hackers appear to have switched targets away from politics and commerce, instead moving towards industrial espionage. In particular, recent phishing attacks have taken the form of an email about current aerospace and defense industry vacancies.
If you don't see any comments yet, congrats! You get first comment. Be nice and have fun.
CLICK TO SHARE