N. Korean hackers exploited Seoul Halloween tragedy to spread malware
Google: N. Korean hackers exploited Seoul Halloween tragedy to spread malware
By Reuters - December 8, 2022 @ 11:26am
North Korean government-backed hackers referenced the deadly Halloween crush in Seoul to distribute malware to users in South Korea, Google’s Threat Analysis group said in a report. - File pic
North Korean government-backed hackers referenced the deadly Halloween crush in Seoul to distribute malware to users in South Korea, Google’s Threat Analysis group said in a report. - File pic
SEOUL: North Korean government-backed hackers referenced the deadly Halloween crush in Seoul to distribute malware to users in South Korea, Google's Threat Analysis group said in a report.
The malware was embedded in Microsoft Office documents which purported to be a government report on the tragedy that killed more than 150 people after tens of thousands of young revellers crowded into narrow alleyways.
"This incident was widely reported on, and the lure takes advantage of widespread public interest in the accident," the Threat Analysis Group said.
Google attributed the activity to a North Korean hacking group known as APT37 which it said targets South Korean users, North Korean defectors, policymakers, journalists and human rights activists.
MORE NEWS
South Korean parents bury children killed in Halloween disaster
South Korea vows thorough investigation into deadly Halloween crush
South Korea steps up monitoring in crowded subways after Halloween crush
South Korea's Yoon apologises for Halloween crush, vows justice
Google said it has not determined what the malware, which exploited an Internet Explorer vulnerability, was intended to achieve.
It reported the problem to Microsoft on Oct 31 after multiple reports from South Korean users on the same day. Microsoft issued a patch on Nov 8.
A United Nations panel of experts that monitors sanctions on North Korea has accused Pyongyang of using stolen funds gained through hacking to support its nuclear and ballistic missile programmes to circumvent sanctions.
North Korea does not respond to media inquiries, but has previously released statements denying allegations of hacking.
On Thursday, South Korean officials warned businesses against inadvertently hiring IT staff from North Korea.
In May, the United States issued a similar advisory, saying rogue North Korean freelancers were taking advantage of remote work opportunities to hide their true identities and earn money for Pyongyang.
By Reuters - December 8, 2022 @ 11:26am
North Korean government-backed hackers referenced the deadly Halloween crush in Seoul to distribute malware to users in South Korea, Google’s Threat Analysis group said in a report. - File pic
North Korean government-backed hackers referenced the deadly Halloween crush in Seoul to distribute malware to users in South Korea, Google’s Threat Analysis group said in a report. - File pic
SEOUL: North Korean government-backed hackers referenced the deadly Halloween crush in Seoul to distribute malware to users in South Korea, Google's Threat Analysis group said in a report.
The malware was embedded in Microsoft Office documents which purported to be a government report on the tragedy that killed more than 150 people after tens of thousands of young revellers crowded into narrow alleyways.
"This incident was widely reported on, and the lure takes advantage of widespread public interest in the accident," the Threat Analysis Group said.
Google attributed the activity to a North Korean hacking group known as APT37 which it said targets South Korean users, North Korean defectors, policymakers, journalists and human rights activists.
MORE NEWS
South Korean parents bury children killed in Halloween disaster
South Korea vows thorough investigation into deadly Halloween crush
South Korea steps up monitoring in crowded subways after Halloween crush
South Korea's Yoon apologises for Halloween crush, vows justice
Google said it has not determined what the malware, which exploited an Internet Explorer vulnerability, was intended to achieve.
It reported the problem to Microsoft on Oct 31 after multiple reports from South Korean users on the same day. Microsoft issued a patch on Nov 8.
A United Nations panel of experts that monitors sanctions on North Korea has accused Pyongyang of using stolen funds gained through hacking to support its nuclear and ballistic missile programmes to circumvent sanctions.
North Korea does not respond to media inquiries, but has previously released statements denying allegations of hacking.
On Thursday, South Korean officials warned businesses against inadvertently hiring IT staff from North Korea.
In May, the United States issued a similar advisory, saying rogue North Korean freelancers were taking advantage of remote work opportunities to hide their true identities and earn money for Pyongyang.
