NORTH Korean hackers are trying to steal nuclear and military secrets from governments and private companies around the world, Britain, the US and South Korea say. They say the groups, called Andariel and Onyx Sleet, are targeting defense, aerospace, nuclear and engineering entities to obtain classified information, with the aim of advancing Pyongyang’s military and nuclear programs and ambitions.
The group has sought information on everything from uranium processing to tanks, submarines and torpedoes, and has targeted the UK, US, South Korea, Japan, India and elsewhere. US Air Force bases, NASA and defence companies are said to have been targeted.
The stark warning about this specific group appears to be a sign that its work combining espionage and money-making is worrying officials because of its impact on sensitive technology and everyday life. The US says the group is financing its espionage activities through ransomware operations against US health entities.
“The global cyber espionage operation we uncover today shows the lengths to which DPRK state-backed actors are willing to go to pursue their military and nuclear programmes. It should remind critical infrastructure operators of the importance of protecting the sensitive information and intellectual property they hold on their systems to prevent theft and misuse,” said Paul Chichester, Director of Operations for the UK’s National Cyber Security Centre (NCSC).
The NCSC assessed that Andariel was part of the North Korean Reconnaissance General Bureau (RGB) 3rd Bureau. The joint alert issued by the US, UK and South Korea shared advice to help defend against North Korean actors, who have also sought information on robotic engines, mechanical arms and 3D printing components.
“These indications show that North Korean threat groups also pose a serious threat to people’s daily lives and cannot be ignored,” said Michael Barnhart, Principal Analyst at Mandiant at Google Cloud.
Read also: Facing American Provocation, North Korea Vows to Strengthen Its Military
“Targeting hospitals to generate revenue and fund their operations demonstrates a relentless focus on fulfilling their primary mission of intelligence gathering, regardless of the potential consequences to human life.”
It is the latest in a series of warnings about North Korean hackers over the years. Some of the most high-profile cyber incidents have been linked to the country, including the 2014 attack on Sony Pictures in retaliation for a Hollywood comedy depicting the assassination of North Korean leader Kim Jong Un.
North Korea is also known for its Lazarus Group activities which have carried out massive thefts worth millions of dollars. (BBC/Z-3)
#Warn #North #Korean #Hacking #Threat
