Cybersecurity researchers have shared details about a North Korean state-run hacking group that has been operating in the shadows for the past five years.
Called APT43, the group targeted not only Western countries (US, Europe), but also governments and celebrities in neighboring countries (Japan, South Korea).
The findings were shared by Mandiant experts, who said that APT43 is a “moderately sophisticated” group, primarily after classified information, but sometimes after money, with the stolen funds They usually fund additional cybercriminal activities.
Laundering of virtual currency When it comes to stealing money, APT43 primarily targets cryptocurrencies. Researchers believe the group used his fake cryptocurrency investment app for Android to trick people interested in cryptocurrency loans to steal their funds, and later hash he laundered money through rentals and the cloud. I discovered that (opens in new tab) mining service.
When it comes to stealing sensitive information, it primarily targets government and military agencies from North Korean adversaries.
“This group is funded primarily by the U.S. military and government, information developed and held within Defense Industrial Bases (DIBs), and by U.S.-based academia and think tanks focused on nuclear security policy and non-proliferation. I am interested in the research and security policies that have been developed,” said Mandiant.in that report (opens in new tab) .
“APT43 will target similar industries within South Korea, particularly non-profit organizations and universities focused on global and regional policies, as well as companies such as manufacturers that can provide information on goods restricted for export to North Korea. showing interest in.”
Mandiant’s main claim that APT43 is a government agency is the fact that it has been seen to “suddenly” switch targets, presumably after receiving orders from higher ups.
“More specifically, Mandiant assesses with some confidence that APT43 is attributed to North Korea’s primary foreign intelligence agency, the North Korean Reconnaissance General Bureau (RGB),” the company said. said. Researchers have been tracking the group’s activity since 2018.
Via: BleepingComputer (opens in new tab)
websitebuildersnow
GIPHY App Key not set. Please check settings