Live data from Hacker News

How the “Kim” dump exposed North Korea's credential theft playbook

dti.domaintools.com

31–40 of 196 posts

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#31
post #25

I’ve heard that in North Korea it is difficult for ordinary people to learn or own a computer. It is assumed that a small number of elite operatives are selected and trained to carry out such tasks, and it is somewhat surprising that they possess the latest technology and conduct hacking.

If anything the hackers in north korea are probably world class if the government is getting their students into focused training programs early in their schooling. Western nations have nothing equivalent due to schooling being generalist and undergrad and grad school not really introducing you to the sort of work you'd actually do on the job as a hacker. 22 year old western hacker for a 3 letter agency is going to have maybe a 6 month softball tangentially related internship of experience under their belt while the north korean might have years and years by that point.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#33
post #26

Earlier quoted context omitted.

Why is this comment downvoted? You have the right to see China, USSR and NK as immoral regimes but there's nothing non-factual here.

[flagged]

You better edit the Wikipedia article to remove the propaganda. According to that, since Roosevelt the Monroe doctrine has been repurposed for hegemony in the Western Hemisphere:

Starting at https://en.wikipedia.org/wiki/Monroe_Doctrine#Roosevelt_Coro... and further.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#34
post #20

Earlier quoted context omitted.

Wait, installing nmap on your laptop from a Linux distribution's repositories is a crime in Germany?

Not really, so long as you don't use it for anything 'bad'. i.e. if you're just running against your local network, who's gonna report it?

Surely then it's the 'use', not the 'possession' that's a criminal offence? Or is it still a criminal offence to possess it, but you're fine as long as no one finds out? Because that doesn't stop it being a criminal offence.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#35
> The leaked dataset attributed to the “Kim” operator offers a uniquely operational perspective into North Korean-aligned cyber operations.

It's puzzling why the NORC hackers didn't use a nearest neighbor hack rather than leaving a trail of bread crumbs all the way back to Pyongyang ;)

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#36
post #26

Earlier quoted context omitted.

Why is this comment downvoted? You have the right to see China, USSR and NK as immoral regimes but there's nothing non-factual here.

[flagged]

> ... the US preying on its neighbors the way Russia and China are currently doing

Well, that's a matter of perspective isn't it? Cuba, Guatemala, Nicaragua, Colombia, Panama, Puerto Rico, Chile, El Salvador, Venezuela, the list goes on. There's a Wikipedia page dedicated to all the US backed coups since 1945 [1] it happens so often.

We've had a post-WW2 history of deposing democratically elected countries (in the Americas and elsewhere) to suit the interests of Western corporations. Who exactly are we protecting?

> ... it was a policy aimed at keeping wars between European colonial powers away from the newly independent countries in the Americas

Where is Moscow?

> ... people in the Americas shouldn't have to die in wars just because one European king insulted another.

Ok, but what about American belligerence? Pinochet and Noriega spring to mind.

Aso, I reject the contention that colonial wars were the product of European kings insulting one another. The interests were and always have been material. Even the Crusades (which were sold on Christian conflict with Islam) were fundamentally materialist in origin.

[1]: https://en.wikipedia.org/wiki/United_States_involvement_in_r...

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#37
post #6

This is interesting due to the tying of DPRK and PRC. It seems hard to say how much coordination there is between the two, but whatever it is, it appears to be greater than zero. While not necessarily surprising, I wonder if this public attribution will make it harder for the PRC to deny involvement with both the DPRK's efforts and their own.

Regardless of how unhappy Beijing may be with things Pyongyang does, North Korea is of such obvious strategic importance to China that they are unlikely to ever waver in their support of the regime or even try to hide it.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#38

Earlier quoted context omitted.

Why is this comment downvoted? You have the right to see China, USSR and NK as immoral regimes but there's nothing non-factual here.

The topic is cybercrime and espionage, not nuclear brinksmanship or colonialism. Whatever parallels can be drawn don't seem to be very relevant, so the comment comes off as an attempt to deflect criticism.

You can’t separate colonialism and imperialism from Korea. As if any of us know what Korea would be doing if the west didn’t invade then sanction among other things.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#39
post #37
post #6

This is interesting due to the tying of DPRK and PRC. It seems hard to say how much coordination there is between the two, but whatever it is, it appears to be greater than zero. While not necessarily surprising, I wonder if this public attribution will make it harder for the PRC to deny involvement with both the DPRK's efforts and their own.

Regardless of how unhappy Beijing may be with things Pyongyang does, North Korea is of such obvious strategic importance to China that they are unlikely to ever waver in their support of the regime or even try to hide it.

What's surprising about this? It's not dissimilar to how the US behaves towards their less than savory strategic allies (or, historically, towards dictatorships as long as they were US-aligned).

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#40
post #6

This is interesting due to the tying of DPRK and PRC. It seems hard to say how much coordination there is between the two, but whatever it is, it appears to be greater than zero. While not necessarily surprising, I wonder if this public attribution will make it harder for the PRC to deny involvement with both the DPRK's efforts and their own.

I don’t see any smoking gun here that would prevent the PRC from denying its involvement in these hacking efforts.
Post reply on HN