North Korean hackers use new tactic to target 'media' and NGOs
The US has warned that alleged North Korean 'hackers' are using a new tactic to try to obtain personal data and sensitive information from "think-tanks", academic institutions, media outlets and non-governmental organisations (NGOs).
© Shutterstock
Tech Ciberataque
The U.S. State Department has accused North Korean hacking group Kimsuky of exploiting misconfigured websites to "spoof legitimate email sender domains and more effectively mask attempts" to obtain private data.
In an advisory issued Thursday, Washington said Kimsuky, which is assessed to operate under the direction of North Korea's military intelligence, "conducts extensive social engineering campaigns designed to manipulate and compromise victims."
The group's members "often pose as journalists, academics, or other seemingly legitimate experts on East Asia affairs with plausible connections to North Korean policy circles," the alert said.
The goal is "to collect information on geopolitical events, foreign rivals' foreign policy strategies, and any information that would impact North Korean interests by illicitly accessing private documents, research, and communications," it added.
The advisory was issued jointly by the State Department, the U.S. Federal Bureau of Investigation and the National Security Agency.
The U.S. Cybersecurity and Infrastructure Security Agency said in 2020 that Kimsuky is "likely tasked by the North Korean regime to conduct global intelligence collection operations."
The group, which is believed to have been active since 2012, targets individuals and organizations in South Korea, Japan and the United States, and focuses on foreign and national security issues related to the Korean Peninsula, nuclear policy and international sanctions, the U.S. federal agency said.
In August, South Korean police accused Kimsuky of trying to hack South Korean personnel working on joint military exercises between Seoul and the United States.
A joint investigation by South Korean police and the U.S. military tracked the address used by the hackers back to one that was identified in a 2014 attack on a South Korean nuclear reactor operator.
Read Also: Biden announces measures to protect the US from cyberattacks (Portuguese version)
Descarregue a nossa App gratuita.
Oitavo ano consecutivo Escolha do Consumidor para Imprensa Online e eleito o produto do ano 2024.
* Estudo da e Netsonda, nov. e dez. 2023 produtodoano- pt.com