Active North Korean campaign targeting security researchers

Re:Active North Korean campaign targeting security researchers by bennyg on Thursday September 07, 2023 @03:26PM (#37424303)

I’d bet they’re prepared to do a ton of damage to South Korea via cyberarms more than traditional weaponry too. Eg cut power to the country for days on end. They’ve clearly got 0days and aren’t afraid to use them.

[ Parent | on HN ]

Re:Active North Korean campaign targeting security researchers by hollerith on Thursday September 07, 2023 @03:58PM (#37424744)

If 'cyberarms' are as potent as you think they are, then how come Russian cyberarms haven't done much damage to Ukraine?

[ Parent | on HN ]

Re:Active North Korean campaign targeting security researchers by NegativeK on Thursday September 07, 2023 @04:34PM (#37425179)

Since 2014, nations with a strong vested interest in Ukraine not falling threw a lot of resources at strengthening the country's infosec.

Also, during a kinetic conflict where you're invading, it's often more strategically valuable to lie dormant in their networks than it is to scorch them, a la America sitting inside of Iraq's phone networks and just listening.

There's a lot of work being done now to change it [1], but I've heard from multiple cybersecurity grunts in critical infrastructure that they just assume foreign APTs are in their networks. Strategically, why in the world wouldn't they be? There's basically no downside other than burning TTPs. We should damn well expect the NSA to have their fingers in every foreign pot they can reach.

[1] To be fair, there was a lot of work before too. But now people are more scared.

[ Parent | on HN ]