North Korea link to NHS hacking attack

24 May 2017, 04:05 | Shawn Tate

North Korea link to NHS hacking attack

Symantec logo sign

But while the links to Lazarus are strong, North Korea denies that it was involved in any sort of state-sponsored attack, dismissing such claims as "a dirty and despicable smear campaign".

This is the second time in a matter of days that a security company links the infamous Lazarus Group to the cyber attack.

But Symantec said the ransomware had numerous hallmarks of other Lazarus attacks, including the 2014 strike on Sony Pictures and a multimillion-dollar theft from the Bangladesh Central Bank. This is consistent with the theories of many other ransomware experts, who view WannaCry as the work of an unsophisticated group, rather than a nation-state.

In addition to Sony, Lazarus has previously been attributed with cyberattacks suffered by the likes of the Bangladesh central bank, among other victims. The malware included Trojan Volgmer and two variants of Backdoor.Destover, the disk wiping tool used in Sony Pictures attacks.

The experts from the United Nations who were investigating the role of North Korea were hacked out by the unknown hackers giving a very detailed view of their work via a mail sent a by the hacking group.

The version of WannaCry that spread like wildfire used an automated system to wreak havoc, itself based on EternalBlue, one of the hacking tools a hacking group called Shadow Brokers stole from the U.S. National Security Agency. The US government and private companies have accused North Korea in the 2014 Sony attack. The malicious software has been used by the North Korea-connected hacking collective Lazarus Group to attack a number of targets, including financial institutions in Southeast Asia.

WWE RAW from Grand Rapids, May 22
More importantly, how will R-Truth respond? Extreme Rules , a WWE Raw branded pay-per-view, will take place on June 4th. WWE has announced that Neville will defend the title against Aries in a submission match at " Extreme Rules 2017".

Liam Payne quit smoking to be positive role model for son
When asked about baby Bear Payne, he said: "Bear is beautiful, I love him and miss him terribly". "It's super cool. An insider said at the time: " Cheryl and Liam wanted to get to know their baby before deciding on a name".

Amazon refreshes lineup of low-cost tablets, new kids model
After all, the company has released a new Fire HD slate in late September or early October for pretty much the last five years. The all new Amazon Fire 7 is boasted to be thinner and lighter than ever before while offering a longer battery life.

After Kaspersky, Symantec also says there is evidence that supports the idea that North Korea may be behind the WannaCry hit.

"The shared code likely means that, at a minimum, WannaCry operators share software development resources with North Korean espionage operators", Ben Read of FireEye told Bloomberg on Tuesday.

Beau Woods, deputy director of the Cyber Statecraft Initiative at the Atlantic Council, said that the Korean used in some versions of the WannaCry ransom note was not that of a native speaker, making a Lazarus connection unlikely.

But Thakur said that some hackers deliberately obfuscate their language to make tracing them harder.

Other digital crumbs linking the North Korean group to WannaCry include a tool that deletes data that had been used in other Lazarus attacks.

Lazarus has also been linked to attacks on banks using their SWIFT messaging network. Additional fingerprints linked Lazarus Group to hacks that wiped nearly a terabyte's worth of data from Sony Pictures and siphoned a reported £57 million from the Bangladesh Central Bank a year ago.



Other News

Trending Now

Zidane's clever squad rotation key to Real Madrid title
They fought back from 2-0 down against Villarreal to win 3-2 in February, showing just how much they wanted the title. One significant outcome of the excellent team spirit has been Madrid's ability to rescue games with late goals.

After making run at Indy 500 pole, Alonso to start 5th
Qualifying was marred by a frightening crash that sent Sebastien Bourdais to the hospital complaining of pain in his right leg. You'll hear commentators talk more about the average speed of those four laps, expressed in miles per hour .

Wenger 'sad' for Adams 'paper bag' jibe
Pressed on whether it would be his last game ever in north London he replied: "I can not tell you that". "We have to do our job, we are professionals".

Donald Trump's Witch Hunt Comment Torched By Salem, Massachusetts Politician
Saudi Arabia is making every effort to dazzle and impress President Donald Trump on his first overseas trip. Moulton's tweet had garnered more than 141,000 retweets and more than 333,000 likes as of Friday afternoon.

Kyle Lowry opts out of final year of contract with Raptors
The Raptors will continue to play without point guard Kyle Lowry , who missed Friday's 115-94 defeat with an ankle sprain. Wall had seven points, three assists and two steals during the third-quarter spree that featured eight Celtics turnovers.

Mark Cuban admits to tanking
The Los Angeles Lakers did everything in their power to stay in the top-3 of this year's draft which meant a lot of losing. The Mavericks will now turn their attention to June's draft, where they'll be picking ninth.

Ainge's patience pays off with Celtics' draft lottery win
State's Dennis Smith or the 6'5" French product, Frank Ntilikina but with Jackson at the helm, everything is in play these days. Fultz, a point guard, would have to battle for minutes behind Isaiah Thomas and Marcus Smart next season.

Texas bill could deny transgender wrestler title defense
Bonnen said the committee will continue hearing testimony if the House takes a break or after it finishes meeting Wednesday. A late tea party-backed change on the floor requires physicians to report complications within 72 hours of them occurring.

Google gets you info by pointing camera at it
In April Google announced that Home would no longer be a US-only product and would branch out to the United Kingdom as well. It's possible there are more features and a wider roll out to come at some point at Google I/O.

Donald Trump's talk with Russians 'wholly appropriate,' adviser says
At one point, McMaster said that the information Trump revealed "was nothing that you would not know from open source reporting". U.S. media reports said Mr Trump had shared top secret material with Russia's Foreign Minister and ambassador on 10 May.