News for hackers. Stuff that matters.

A comment on The NSA has linked the WannaCry computer worm to North Korea. Parent comment

Re:The NSA has linked the WannaCry computer worm to North Korea by intern4tional on Wednesday June 14, 2017 @11:09PM (#14557650)
Not really. Very few attacks dedicate enough effort to evasion or anti-forensics to be completely untraceable.

There are plenty of things that get reused such as public keys that can be reliably tied to a group. There are also many private indicators that are not released to the general public Discovering who funds that group or where they operate from can be tougher, but APT groups are trackable.

[ Parent | on HN ]
Re:The NSA has linked the WannaCry computer worm to North Korea by 3131s on Wednesday June 14, 2017 @11:44PM (#14557798)
Re-using a public key seems like an incredibly basic mistake.

How is the chain of custody for digital evidence handled by intelligence agencies and 3rd party researchers? Are there higher standards with regard to digital evidence? It seems to me that with digital evidence, ultimately you at least have to trust the investigatory agency at hand. But we're past that, because a huge number of Americans like myself will never trust any information from the US government.

[ Parent | on HN ]