Slashdot Mirror


US Government Finds New Malware From North Korea (engadget.com)

Days after the historic North Korea-United States summit, the Department of Homeland Security issued a report on Thursday warning of a new variant of North Korean malware to look out for. Called Typeframe, the malware is able to download and install additional malware, proxies and trojans; modify firewalls; and connect to servers for additional instructions. Engadget reports: Since last May, the DHS has issued a slew of alerts and reports about North Korea's malicious cyber activity. The department also pointed out that North Korea has been hacking countries around the world since 2009. And of course, don't forget that the U.S. also labeled that country as the source of Wannacry cyberattack, which notably held data from the UK's National Health Service hostage, and wreaked havoc across Russia and Ukraine. CNN was first to report the news.

35 of 93 comments (clear)

  1. The Source by phantomfive · · Score: 5, Insightful

    I want to point out that WannaCry was built on an exploit from the NSA (The ShadowBrokers leak). If the NSA had spent half as much time defending the internet as they do attacking it, then WannaCry never would have happened. Furthermore if admins had been up on their patches, they wouldn't have been hit by the attack. Finally, if admins had been doing proper backups, they wouldn't have needed to pay to get it unlocked.

    So there are multiple layers of fuckup in WannaCry.

    --
    "First they came for the slanderers and i said nothing."
    1. Re:The Source by iggymanz · · Score: 5, Insightful

      hilarious how the populace turns a blind eye to the government that sponsors the most terrorism, the most malware, the most regional destabilizing, the one that gives support to the world's cruelest dictators.....yes, that's the USA.

    2. Re: The Source by Anonymous Coward · · Score: 1

      The US exploits donâ(TM)t hold health data for ransom, they exploit Siemens password of 1234 in countries where not being a head choppin Muslim is a crime punishable by head choppin. Where women have zero rights and where slavery is mandated by law.

      Uh, the U.S. is best friends with Saudi Arabia, the country where women may not move in public without male warden. Never mind that Osama bin Laden, the guy organizing 09/11, was from there.

    3. Re: The Source by iggymanz · · Score: 1

      the U.S. doesn't hold health (and climate and carcinogen) data for ransom?

      oh?

    4. Re:The Source by kilfarsnar · · Score: 1

      hilarious how the populace turns a blind eye to the government that sponsors the most terrorism, the most malware, the most regional destabilizing, the one that gives support to the world's cruelest dictators.....yes, that's the USA.

      Ssshh! America's rosy self-image must not be disturbed.

      --
      "What the American public doesn't know is what makes them the American public." -Ray Zalinsky (Tommy Boy)
  2. What OS is targetted? by hcs_$reboot · · Score: 1

    Linux? iOS? Android? Solaris? BSD? give us a clue...

    --
    Slashdot, fix the reply notifications... You won't get away with it...
    1. Re:What OS is targetted? by Anonymous Coward · · Score: 1

      N.K. is targeting "Basic" in a massive TRS-80 botnet.

    2. Re:What OS is targetted? by phantomfive · · Score: 1

      "This malware report contains analysis of 11 malware samples consisting of 32-bit and 64-bit Windows executable files and a malicious Microsoft Word document that contains Visual Basic for Applications (VBA) macros."

      Note that all the samples are trojans, you have to run them to get infected. These aren't remote exploits. Also, fwiw there is no reason presented to believe they are from North Korea.

      --
      "First they came for the slanderers and i said nothing."
  3. Re:Warmongers by olsmeister · · Score: 2, Funny

    I don't know what CNN you watch, but the one that I watch has only talked about Anthony Bourdain lately. I think Trump probably had him killed because he knew that would get the spotlight away from him for a while.

  4. Re:CNN first to report fake news by duke_cheetah2003 · · Score: 5, Insightful

    Imagine THAT! CNN trying to provoke a war to defeat peace so they can get a dig in at the president.

    Just so we're crystal clear, CNN reported on a DHS alert. So yeah. There's that.

  5. Re:So? by Anonymous Coward · · Score: 1

    Maybe. However most NK citizens don't have access to the internet, just the state intranet. Internet access requires special authorization.

    Sure someone could get authorization, or find a hole in the security and release the malware, but since access requires government authorization the most obvious explanation is that it came from the government (or government supported).

  6. Re:Warmongers by fermion · · Score: 2, Insightful
    I think the issue here is that the process was so non-traditional. No work was done before hand by the professionals diplomats that is common in most other negotiations.

    No real agreement was made, other than the US conceding the right to conduct military exercises as it wishes. On the other hand, evidently, NK is still free to do whatever it wishes, including cyber attacks on the US, which is increasingly considered an act of war.

    This is not the 'Obama apology tour' in which there are multiple legitimate interpretations. This is pure accommodation of terrorist who brutally murders his people by a sitting US President. There is no way to put lipstick on this pig.

    Yes, we need to do everything we can to protect the world. Yes, sometimes that is not ideal, as in the treaty we had with Iran which was far from as effective as we wanted it to be, but still effective as a starting point. Sometimes we do need to kick ass, as every sitting president has done.

    Now, we could say that we should give Trump credit for being innovative, i.e. bringing a real estate video to a brutal and murderous dictator. If it would have worked, if we would have gotten a real commitment to eliminate the nuclear capability of NK, or at least if Trump would have gotten his hotels on the peninsula, then we would have all been cheering. But being a leader means one has to take responsibility for one's failures as well as aculades for the successes.

    --
    "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
  7. Re: Warmongers by TimMD909 · · Score: 1

    If you think everyone is not 'liberal' enough, I'm pretty sure you're the whacko. If everyone in the world seems insane but you, the more likely scenario is that you're insane.

  8. Not the NORKs by PPH · · Score: 1

    Wannacry is based on an exploit called EternalBlue developed by the NSA. That North Koreas may have picked up a copy and re-targeted it demonstrates the threat of unchecked proliferation of such weapons by irresponsible organizations.

    --
    Have gnu, will travel.
  9. Re:First ingredient of tyranny: attack free press by najajomo · · Score: 2

    Anonymous Coward "One of the first steps to achieving tyranny is to attack and discredit the free press"

    'the CIA task force “now has relationships with reporters from every major wire service, newspaper, news weekly, and television network in the nation,”'

  10. Don't worry by quonset · · Score: 1, Insightful

    The con artist will defend this malware, just like he defended North Korea's brutal regime and its dictator, or the way he defends Putin and Russia's deliberate bombing of hospitals and civilians in Syria.

    He'll probably even apologize for this malware simply because he admires dictators.

    1. Re:Don't worry by l0n3s0m3phr34k · · Score: 1

      "These people, they make the best malware. I thought Putin did it, but this is just fabulous. Everyone is talking about it, everyone is telling me this is the most best they've seen this year, if not ever."

  11. Re:North Korea bad. by PopeRatzo · · Score: 2

    Ask yourselves why North Korea and Russia are constantly made out to be this big threat

    OK, first of all, it's not "North Korea" and "Russia" that are the threat, it's the regimes governing North Korea and Russia. I don't know any North Koreans, but all the Russian people I know are fine people. I have no problem with them.

    1) Why the Kim regime is a threat: Kims regularly have their political enemies murdered (including family members) including one who was strapped to an anti-aircraft gun and vaporized.

    https://www.bbc.com/news/world...

    2) Why the Putin regime is a threat: He regularly has his political enemies murdered, sometimes via terrorist attacks on Western countries. He also used state intelligence machinery to attack elections in the United States, the UK, and the Ukraine, and in the case of the US colluded with criminals to throw the 2016 presidential election to a mobster.

    https://www.washingtonpost.com...

    --
    You are welcome on my lawn.
  12. Re:Warmongers by drinkypoo · · Score: 2

    No real agreement was made, other than the US conceding the right to conduct military exercises as it wishes. On the other hand, evidently, NK is still free to do whatever it wishes, including cyber attacks on the US, which is increasingly considered an act of war.

    Neither side made a firm commitment, and termination of operations with SK is contingent upon NK stopping nuclear testing. If they continue testing, Trump will ratchet up his blathering from 10 to 11 and explain that due to NK failing to keep its commitment to him (personally) that we have never been closer to recommencement of hostilities.

    Not a Trump fan, but this is the one thing Trump might actually be able to do. Or, you know, he might just plunge us into WWIII, but I don't think so. I think not-so-lil'-Kim is smarter than that. That's one thing Trump has right. He might be an asshole, but he's a successful asshole.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  13. Re:North Korea bad. by drinkypoo · · Score: 1

    The only reason the Kim regime is a credible military threat is nukes. NK hasn't been projecting military power into other nations. What dictators do to their own people has little effect on our people. Russia, on the other hand...

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  14. Re:The lengths the deep state will go by AutodidactLabrat · · Score: 1

    No one needs to tear down his failures
    We DO have to expose them though, since the MSM refuses to do its job

  15. Re:North Korea bad. by AutodidactLabrat · · Score: 2

    He also used state intelligence machinery to attack elections in the United States

    Proof delivered, via 4 guilty verdicts and one plea.

    So just like obama?

    Proof? None

  16. They don't have internet, just nukes? by raymorris · · Score: 1

    > I find it HARD TO BELIEVE that they have the tools necessary to even get hack tools like debuggers, etc

    So your theory is that a company which can build nukes can't download these debuggers from Microsoft?

    https://docs.microsoft.com/en-...

    Are they also unable to download https://x64dbg.com/

    And all of these?

    https://www.concise-courses.co...

    > As someone who works in the cyber industry;

    Vernon? There's a reason we fired you.

  17. s/company/country/ by raymorris · · Score: 1

    That should of course say "country", not "company".

  18. USB fans anyone? by SonarNerd · · Score: 1

    Was this one included in the USB fans given to reporters during the NK - US summit? ;) :D

  19. North Korea isn't the US, or Russia by raymorris · · Score: 1

    North Korea isn't the United States. Internet access isn't even available to private citizens. It used only for government purposes.

    Foreign guests such as diplomats are of course often granted access to use the North Korean internet to communicate with their home countries. Which falls under the "government purposes" category, because it's not done for the convenience of the foreigners.

    North Korea is also a place where merely disagreeing with Dear Leader will get you publicly executed. Nobody in NK is secretly installing backbone cables out of NK to secretly attack the US and Western Europe without permission from the government. If you're going to risk your life illegally accessing the internet, you don't do it for that purpose.

    There are criminal hackers in RUSSIA, so when attacks come from Russia we have to try to figure out whether they are state-sponsored or not. Often, is it easy to know, hard to prove. North Korea is nothing like Russia, though. Attacks from North Korea, and generally any packets from North Korea, come from the government network, as part of government operations.

  20. Re:The lengths the deep state will go by duke_cheetah2003 · · Score: 2

    I don't think I've ever seen a president so disrespected.

    Well, I have definitely never seen the office of the President of the United States so disrespected. So I think jabbing at Trump is completely justified.

    He is making mockery of all of us, and our nation. He's making us all look like him. He's disrespectful to other world leaders (except dictators! weird?) He is disgracing the office of the President and our entire nation.

    So in turn, everyone who can, makes a mockery of Trump, in the media, in print, on the web, YouTube, SNL, late night comedy, stand up, everywhere Trump is the punchline of every joke. Because he is a joke. Alas, he is not funny by any stretch.

  21. Re:CNN first to report fake news by thegarbz · · Score: 2

    CNN trying to provoke a war to defeat peace so they can get a dig in at the president.

    Occam's razor: No need to provoke a war to get a dig at the president, he offers himself up to that voluntarily daily.

  22. Re:First ingredient of tyranny: attack free press by l0n3s0m3phr34k · · Score: 1

    Great source! The also say that ET stopped the US from setting a nuke off on the Moon", some excellent advise filed under "Health" about David Icke and Reptians, and even this article which is basically several paragraphs off Wikipedia.

  23. Re:CNN first to report fake news by bill_mcgonigle · · Score: 1

    War would be good for ratings but I'm not sure that the CNN people want war so much as they'd be willing to accept a war to get rid of Trump. The 7th Floor always wants a new war and would be glad to be rid of Trump, so you're good there.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  24. Re:The lengths the deep state will go by cyberchondriac · · Score: 1

    Right...
    The MSM (news and television, movies, etc.) and European media absolutely drooled and fawned over BHO (and his wife) for 8 whole years. The only criticism he ever got was from Fox News (where all he got was criticism, actually) but which was a drop in the ocean compared to the MSM.
    Obama even got a Nobel prize just for getting elected. You could never criticize anything he said or did, else his army of sycophants deemed you "racist" and then ostracized you, and even today this cult of Obama claim there were no scandals despite the fact that were at least a dozen during his administration.
    And now those same sycophants are projecting their own behaviors, as a negative, onto all Trump supporters, many of whom actually do exhibit the same cultish traits without the projection. In that sense, the two parallel each other: cultish following, huge egos.
    It really is the Cult of Personality these days.

    --

    Look back up at my post, now look back down, you're on the Internet. Now look back up. I'm a signature.
  25. Re:North Korea bad. by oh_my_080980980 · · Score: 1

    Recent FBI report and admission that Trump's campaign was being monitored. https://www.nationalreview.com...

  26. Re:The lengths the deep state will go by xxxLCxxx · · Score: 1

    To me, it looks like they are playing along willingly.

  27. Re:North Korea bad. by AutodidactLabrat · · Score: 1

    Like I said, proof none.
    If you think that the FBI was required to NOT watch contacts between Trumpistas and the Russians, you truly believe in a man above the law!

  28. Re:CNN first to report fake news by duke_cheetah2003 · · Score: 1

    They're both trying to undermine the President's efforts at peace. They both hate the President and are inventing any excuse they can to discredit him. This isn't hard to understand.

    Last time I checked, the majority of Americans hate Trump. Passionately. Kinda reflects in the government. Our government is of the people, by the people, and surprise surprise, THE PEOPLE fucking hate Trump.

    You don't get to be probably the most hated man in America by not stepping on some toes and pissing off people along the way. It's no surprise that the MAJORITY of this country is hell bent on persecuting this POTUS. I can think of no one more deserving. He wanted the spot light on him. He's getting more than he bargained for.

    It's just hilariously amusing when people like this guy I quoted spew forth Apple fanboi levels of love and idolage for Mr. Trump. Everything bad said about this man is some conspiracy by the left, every single thing! The left is responsible for everything wrong with Trump. That's just irrational. Which describes Trump's supporters perfectly. Irrational.