Live data from Hacker News

The NSA has linked the WannaCry computer worm to North Korea

washingtonpost.com

21–30 of 253 posts

Re: The NSA has linked the WannaCry computer worm to North Korea

#21
OK, so I know this is going to come up in the comments, but this is not remotely a baseless allegation. The Lazarus group (one of the names for the DPRK-associated APT group) is somewhat well known and is quite sophisticated. This is the same group that hacked Sony a few years back. And to preempt people who are going to chime in with "Sony was just some insider leaking data" there is extensive evidence showing it was the work of a previously unidentified APT group. See here: https://www.operationblockbuster.com/wp-content/uploads/2016...

I can't comment about specifics linking WannaCry to the Lazarus group, but that seems to be the consensus in the security community.

DISCLAIMER: I worked with the people who wrote that report

Re: The NSA has linked the WannaCry computer worm to North Korea

#23

Though the hackers raised $140,000 in bitcoin, a form of digital currency, so far they have not cashed it in, the analysts said. That is likely because an operational error has made the transactions easy to track, including by law enforcement. As a result, no online currency exchange will touch it, said Jake Williams, founder of Rendition Infosec, a cybersecurity firm. “This is like knowingly taking tainted bills fro…

Who's blacklisting these bitcoins? Is that public or is Rendition speculating?

Re: The NSA has linked the WannaCry computer worm to North Korea

#25
post #2

The NSA has lost all credibility, as far as I am concerned.

I mean, at least find another whipping boy... this DPRK attribution is getting old hat

I wasn't aware of North Korea generally being blamed for cyberattacks.

It sure does fit with them needing foreign currency in the wake of the collapse of the Kaesong project and a freezing of relations with ASEAN countries.

Re: The NSA has linked the WannaCry computer worm to North Korea

#26

OK, so I know this is going to come up in the comments, but this is not remotely a baseless allegation. The Lazarus group (one of the names for the DPRK-associated APT group) is somewhat well known and is quite sophisticated. This is the same group that hacked Sony a few years back. And to preempt people who are going to chime in with "Sony was just some insider leaking data" there is extensive evidence showing it wa…

Re: Sony Hack

I heard that the DPRK was definitely involved, but that they involved themselves at a later point in the publicity over the attack, and that it the original attack was initiated by disparate individuals only loosely cooperating.

Not to disparage your points on the Lazarus group. I've heard the same about their sophistication. I know next to nothing about the WannaCry attack besides the tragedy of the NHS succumbing to it.

Re: The NSA has linked the WannaCry computer worm to North Korea

#27
post #4
post #3

And why should we believe in the NSA this time? A scalded cat knows better than to dip its paw in hot fudge again.

Remind me what past incident you are referring to.

There's that little part where they claim to be dedicated to helping keep our information systems secure, while they simultaneously stockpile zero day exploits and work behind the scenes to subvert and weaken encryption practices.
Post reply on HN