That's a fairly detailed analysis of an APT workflow.
Now, non-APT actors, if they wanted to up their level of sophistication, might replicate some of these workflows for their own nefarious activities.
How the “Kim” dump exposed North Korea's credential theft playbook
21–30 of 196 posts
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#22Earlier quoted context omitted.
The topic is cybercrime and espionage, not nuclear brinksmanship or colonialism. Whatever parallels can be drawn don't seem to be very relevant, so the comment comes off as an attempt to deflect criticism.
Maybe it wasn’t clear, but I think the comment is explaining the importance for superpowers of keeping their immediate surroundings politically aligned - china wants NK on their side for the same reason neither the US or the URSS wanted nukes on their doorstep.
[deleted]
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#23Earlier quoted context omitted.
[flagged]
>Not sure about US law, but in Germany, creating or possessing a hacking tool (including things like nmap) is a criminal offence. Surely that must be wrong, are security certs not a thing in Germany?
Unfortunately that's true: https://www.gesetze-im-internet.de/englisch_stgb/englisch_st...
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#24Earlier quoted context omitted.
Why is this comment downvoted? You have the right to see China, USSR and NK as immoral regimes but there's nothing non-factual here.
The topic is cybercrime and espionage, not nuclear brinksmanship or colonialism. Whatever parallels can be drawn don't seem to be very relevant, so the comment comes off as an attempt to deflect criticism.
[deleted]
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#25I’ve heard that in North Korea it is difficult for ordinary people to learn or own a computer. It is assumed that a small number of elite operatives are selected and trained to carry out such tasks, and it is somewhat surprising that they possess the latest technology and conduct hacking.
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#26Earlier quoted context omitted.
I don't think Chinese support for NK has ever been a secret anymore than the the US support for South Korea has. And it's in China's backyardd so they've got way more of an excuse. And if you think that doesn't matter, look at the Monroe Doctrine [1]. Taken further, the so-called Cuban Missile Crisis should really be called the Turkey Missile Crisis. The US (through NATO) placed Jupiter nuclear MRBMs in Turkey, only…
Why is this comment downvoted? You have the right to see China, USSR and NK as immoral regimes but there's nothing non-factual here.
[flagged]
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#27[deleted]
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#28Earlier quoted context omitted.
>Not sure about US law, but in Germany, creating or possessing a hacking tool (including things like nmap) is a criminal offence. Surely that must be wrong, are security certs not a thing in Germany?
Unfortunately that's true: https://www.gesetze-im-internet.de/englisch_stgb/englisch_st...
Ugh. It does look like the wording gives some room though?
As in, it requires “preparing the commission of an offense”. Does acquiring the tool for other uses like learning or professional training help?
Or even better, shouldn’t lack of proof that the user had malicious intent be enough?
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#29Earlier quoted context omitted.
Why is this comment downvoted? You have the right to see China, USSR and NK as immoral regimes but there's nothing non-factual here.
The topic is cybercrime and espionage, not nuclear brinksmanship or colonialism. Whatever parallels can be drawn don't seem to be very relevant, so the comment comes off as an attempt to deflect criticism.
It was still a fascinating aside, and it's not like HN stays on topic in a thread. I learned something today.
Re: How the “Kim” dump exposed North Korea's credential theft playbook
#30Earlier quoted context omitted.
Why is this comment downvoted? You have the right to see China, USSR and NK as immoral regimes but there's nothing non-factual here.
[flagged]
> For starters, this propaganda often mischaracterizes the Monroe Doctrine as the US preying on its neighbors the way Russia and China are currently doing, when in fact it was a policy aimed at keeping wars between European colonial powers away from the newly independent countries in the Americas.
...so we can freely do as we please. Of course we've been preying on our neighbors. We've been invading and deposing all across the Americas to force alignment with our interests for well over a century now. We even have terrorist training camps hosted on our soil: https://en.wikipedia.org/wiki/Western_Hemisphere_Institute_f...
What, do you think that our invading Grenada, or Panama, is somehow in their interests? It's a flagrant violation of international law and sovereignty. To imagine that this is somehow an abnormal deviation from our "protection" of our neighbors is... well, I honestly didn't realize anyone thought that way anymore.
Furthermore, we didn't enforce this doctrine when France invaded (https://en.wikipedia.org/wiki/Capture_of_Saint_Pierre_and_Mi...), nor in the Falklands war.
Look I can understand not thinking america is "evil" or entirely machiavellian, but it seems just as absurd to take any noble intentions we claim to have at face value. The monroe doctrine is as good an example of this as any.