Suspected N. Korean hacking group steals military, diplomatic secrets

[Lee J <lee () riskbasedsecurity com>]

http://english.yonhapnews.co.kr/northkorea/2013/09/12/36/0401000000AEN20130912007200320F.html

SEOUL, Sept. 12 (Yonhap) -- A hacking group with suspected links to North
Korea has conducted cyber espionage on a number of South Korean government
agencies over the past three years, a local computer security firm said
Thursday.

According to Hauri Inc., an anti-virus software maker, the methods employed
by the hacking group in its attacks were similar to those used in recent
attacks by North Korean hackers.

They have implanted malicious codes in the networks of the attacked
agencies and stolen confidential military and diplomatic information, the
company claimed.

Earlier in June, North Korea was presumed to have attacked the websites of
South Korean presidential office, dozens of other government offices and
local news outlets.

The latest series of attacks took place starting June 25, the anniversary
of the outbreak of the 1950-53 Korean War, until July 1, in which the
websites of 69 government and private organizations, including the Prime
Minister's Secretariat, were attacked.

North Korea is known to operate a cyber-warfare unit of 3,000 elite hackers
who are trained to break into computer networks to steal information and
distribute malware.

_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://lists.osvdb.org/mailman/listinfo/dataloss
For inquiries regarding use or licensing of data, e-mail
        sales () riskbasedsecurity com 

Supporters:

o()xxxx[{::::::::::::::::::::::::::::::::::::::::>
# InfoSec Builders, Breakers and Defenders - Time Square, New York City  18-21 November
# OWASP AppSecUSA 2013  -   http://www.appsecusa.org
o()xxxx[{::::::::::::::::::::::::::::::::::::::::>

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security offers security intelligence, risk management services and customized security solutions. The 
YourCISO portal gives decision makers access to tools for evaluating their security posture and prioritizing risk 
mitigation strategies. Cyber Risk Analytics offers actionable threat information and breach analysis.