Re:Update on campaign targeting security researchers
by meowface on Friday April 02, 2021 @06:36PM
(#26676665)
>Q: Do we think that anyone in North Korea, never mind anyone in power in North Korea, cares whether some group in the West "attributes" another alleged hack to them?
Possibly. It's true that they may just not care at all. But it's difficult to know how they work and think internally.
>Would that be the forensic investigators who can't actually disclose their evidence of the "mistake" because it might help the adversary?
It would be the investigation/research team and whoever's leading them who would be making that decision. But, basically, yes.
Q: Do we think that anyone in North Korea, never mind anyone in power in North Korea, cares whether some group in the West "attributes" another alleged hack to them?
> forensic investigators often only need to discover one mistake to start pulling on threads and pivoting
Would that be the forensic investigators who can't actually disclose their evidence of the "mistake" because it might help the adversary?