Slashdot Mirror


North Korean Hackers Are Targeting US Defense Contractors (wpengine.com)

chicksdaddy quotes Security Ledger: North Korean hackers have stepped up their attacks on U.S. defense contractors in an apparent effort to gain intelligence on weapon systems and other assets that might be used against the country in an armed conflict with the United States and its allies, The Security Ledger is reporting. Security experts and defense industry personnel interviewed by The Security Ledger say that probes and attacks by hacking groups known to be associated with the government of the Democratic People's Republic of Korea (DPRK) have increased markedly as hostilities between that country and the United States have ratcheted up in the last year. The hacking attempts seem to be aimed at gaining access to intellectual property belonging to the companies, including weapons systems deployed on the Korean peninsula.

"As the situation between the DPRK and the US has become more tense, we've definitely seen an increase in number of probe attempts from cyber actors coming out of the DPRK," an official at an aerospace and defense firm told Security Ledger. The so-called "probes" were targeting the company's administrative network and included spear phishing attacks via email and other channels. The goal was to compromise computers on the corporate network... So far, the attacks have targeted "weakest links" within the firms, such as Human Resources personnel and general inquiry mailboxes, rather than targeting technical staff directly. However, experts who follow the DPRK's fast evolving cyber capabilities say that the country may have more up their sleeve.

CNBC also reports that America's congressional defense committees have authorized a last-minute request for $4 billion in extra spending for "urgent missile defeat and defense enhancements to counter the threat of North Korea."

Other countries newly interested in purchasing missile defense systems include Japan, Sweden, Poland, and Saudi Arabia.

15 of 146 comments (clear)

  1. alliance by PopeRatzo · · Score: 3, Insightful

    Our good friends in Russia are still doing lots of business with North Korea.

    Donald, they're laughing at you, not with you.

    https://www.theatlantic.com/in...

    --
    You are welcome on my lawn.
    1. Re:alliance by Desler · · Score: 3, Insightful

      If you have a pulse.. and a conscious.. you cannot condone the continual violations of human rights.. the epic oppression of the people in his country while at the same time trying to make nice with this terrorist-in-charge.

      Interesting claim since he’s doing just that with China, Russia and Saudi Arabia.

    2. Re:alliance by Miles_O'Toole · · Score: 2

      If by "make peace with Russia" you mean surrender your nation's presidency to Vladimir Putin, then the United States can cross that one off as Mission Accomplished.

      --
      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.
    3. Re:alliance by Boutzev · · Score: 2

      You forgot one important point. Predictability is what makes your allies stay in line with you. Predictability is what allows you to sign treates (or a deal as some may say) with other countries. Someone with a business background would probably know that an unpredictable partner isn't a partner at all (unfortunately the US president has a doubtable business qualification). When you go unpredictable you get what you are looking for, that is:
      - other countries don't trust you and don't want to be your allies since they are not so sure if you are going to protect them when they need it.
      - other countries refuse to sign any treaties with you since they don't trust you for not breaking it in a few years time

      When you loose your alies you loose what makes the US the leader in world affairs - it's influence.

  2. No shit sherlock by rsilvergun · · Score: 5, Insightful

    of course they are. It would be silly if they weren't. Hell, I'm sure our allies are targeting us and we're targeting them. That's just the nature of these things. The fact that we can read stories about it means NK isn't very good at it.

    Now, watch the news. If you start seeing more and more of these kind of stories about scary things NK is doing that's when you start worrying, because it means our media is gearing us up for war with them. Go look back at media coverage before Iraq/Afghanistan if you doubt me.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
    1. Re:No shit sherlock by Miles_O'Toole · · Score: 5, Informative

      Is this something that normally happens here...a person willfully misinterprets another's argument, then advances points that have little or nothing to do with what was actually being discussed?

      rsilvergun pointed out quite accurately that it is possible to track the chances of US military aggression by watching US "mainstream media". More and more stories intended to gin up anger, hatred and fear in the US population with respect to a prospective target means greater and greater chances that the US will attack.

      The record of US news media in such situations is clear and easy to track. For example, in the run-up to the second invasion of Iraq, news and public affairs shows like "Meet the Press", "Face the Nation" and such featured nearly 300 interviews with "experts" who favoured some kind of military action in Iraq. Only three interviews were conducted with people who were unabashedly against any kind of intervention.

      Did you really not know this?

      --
      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.
    2. Re:No shit sherlock by AmiMoJo · · Score: 3

      Is this something that normally happens here...a person willfully misinterprets another's argument, then advances points that have little or nothing to do with what was actually being discussed?

      Not just here, it's everywhere now. Instead of having debates people just re-frame and start spooling out their standard talking points.

      I think a lot of them aren't even aware they are doing it, they are just copying people they see making successful "arguments".

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  3. Two to tango? by AHuxley · · Score: 2

    Why have sensitive mil and contractor data in plain text on random internet facing networks?
    What is US counterintelligence doing?
    Watch the contractor network and use lots of encryption. Compartmentalize projects and data. Just in time from just about any company is not secure.

    The next question for the USA is the quality of its mil, gov and contractor human security.
    Who is around your bases, ports offering mil/contractors pleasure, alcoholic beverages and cash for US secrets?
    Start doing interviews and background reports on all mil officials and contractors.
    Look for new wealth, holidays, police reports of loud parties, home improvements, a new car, unexpected shopping, gifts, changes in personality, boasting.
    Look at the cell phone movements of at risk mil/contractors. Who are they meeting, talking to? What new cell phones do their cell phones stay next to for some time?

    --
    Domestic spying is now "Benign Information Gathering"
    1. Re:Two to tango? by Miles_O'Toole · · Score: 2

      I'd be inclined to just drop an appropriately-loaded flash drive or two around sites I was interested in and wait for it to be used where it might do me some good.

      For example, there's a 512 GB drive called the "Patriot Supersonic Mega". What ultra-loyal, flag-waving military person could resist a name like that? Presented in a manner screaming "Unopened Original Packaging", I bet sooner or later it would wind up somewhere useful. If not, oh well. I just wasted a hundred bucks on a failed espionage attempt...hardly a huge investment, given the potential up-side.

      It would even make sense to have a crate or two of them fall off a truck somewhere to be "discovered" and sold by a lucky serviceman to his buddies.

      --
      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.
  4. Yawn by Anonymous Coward · · Score: 2, Insightful

    Sounds like the usual government/security-industrial-complex trolling for more funding/authority. Been there, heard that.

  5. Vault 8 has a few things to say about such claims. by Noishkel · · Score: 2, Interesting

    For those not paying attention Wikileaks have revealed extensive technical details about the CIA's ability to force certificates and plants traces into systems to frame people for the actions of the US security agencies.

    https://www.theregister.co.uk/2017/11/10/cia_kaspersky_fake_certs_ploy/

    While I have no doubt that North Korea would gladly do so, but we need to face a few facts about the ability of the NK's to really do this much damage.

  6. Re: Encryption keys anyone. by kaur · · Score: 3, Informative

    All "our" phones are actually Chinese or Taiwanese or South Korean phones.
    They may have all the backdoors in the world and the US would never know.

  7. Re:Counter with honeypots by Applehu+Akbar · · Score: 2, Insightful

    Filled with anti-NK propaganda, in the Korean language.

    No, seed the honeypot with "plans" and "manufacturing data" for the new American "quantum wormhole bomb" of infinitely powerful capabilities and that has already been deployed in DPRK territory using "microdrones." Start a snipe hunt that diverts Un's military in hilarious directions until it runs out of resources.

  8. Re:Counter with honeypots by AmiMoJo · · Score: 2

    What do you think NK is doing to the US right now?

    They keep baiting Trump, knowing that he will be unable to resist responding with a tweet or vague threat, which only makes him look even less capable of actually doing anything to improve the situation and strengthens Un's position as a player on the world stage.

    --
    const int one = 65536; (Silvermoon, Texture.cs)
    SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  9. Re:Counter with honeypots by penandpaper · · Score: 2

    They keep baiting Trump, knowing that he will be unable to resist responding with a tweet or vague threat, which only makes him look even less capable of actually doing anything to improve the situation and strengthens Un's position as a player on the world stage.

    Ok, so what is the proper response? How does he respond without improving Un's position on the world stage? Or how does he respond to limit the nuclear capabilities of NK? Considering the last 30-50 years I don't think there has been any response that has worked.

    Besides, if the only response are Tweets or vague threats then that is definitely better than preemptive war.