Slashdot Mirror
North Korean Hackers Infiltrate Chile's ATM Network After Skype Job Interview (zdnet.com)
A Skype call and a gullible employee was all it took for North Korean hackers to infiltrate the computer network of Redbanc, the company that interconnects the ATM infrastructure of all Chilean banks. From a report: Prime suspects behind the hack are a hacker group known as Lazarus Group (or Hidden Cobra), known to have associations to the Pyongyang regime, is one of the most active and dangerous hacking groups around, and known to have targeted banks, financial institutions, and cryptocurrency exchanges in the past years. Lazarus' most recent attack took place at the end of December last year but only came to the public's attention after Chilean Senator Felipe Harboe called out Redbanc on Twitter last week for not disclosing its security breach. The company, which has direct lines into the networks of all Chilean banks, formally admitted to the hack a day later in a message posted on its website, but that announcement didn't include any details about the intrusion. However, a day after Redbanc's admission, an investigation conducted by Chilean tech news site trendTIC revealed that the financial firm was the victim of a serious cyber-attack, and not something that could be easily dismissed. According to reporters, the source of the hack was identified as a LinkedIn ad for a developer position at another company to which one of the Redbanc employees applied.
Just for the record, I had nothing to do with this.
I am not interested in articles about life extension advancements.
It's not "after a skype interview", but rather "after the user opened a malicious executable which compromised the system". How is this newsworthy again?
That was sarcasm, in case anybody didn't get it...
Why did the chicken cross the road? Because Elon Musk put an AI chip in its head.
This is what you deserve for hiring cheap remote workers.
The title makes it seem as if Skype was the infection vector, but reading the article will tell you it wasn't. The problem, as usual, is stupid people doing stupid things, "during this interview [the Skype call], the Redbanc employee was asked to download, install, and run a file named ApplicationPDF.exe, a program that would help with the recruitment process and generate a standard application form." Yes, Skype is a mess, but it didn't infect the computer system.
North Korea has nothing to gain by doing flippant things like this at this point in time when they're trying to reconcile with the world. This is just malicious attribution most likely carried out by the U.S. to continue throwing wrenches into the work as always.
Also, what could they possibly gain by doing this? Plop out money at some cash dispenser and then send an agent to collect the "booty" and bring it back home? As usual, a "report" with no sense to it.
I read the title, and I was thinking of Chilie's Bar and Grill, (a somewhat popular food chain in the US). I was picturing some early 20 something store manager, just getting tricked by this guy. Then I read a little further realize it was the country.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
Khazar Talmudic Jews believe this of all they call goyim/gentiles (any non-jew): Jews = biggest racists of all for which they "jew guilt" you for no less! They're hypocrites known as thieves all thru history or were Argentines in the 1940 under Peron, Spanish inquistion, France (1306), Egypt (despoiled/robbed by jews), Arabs (pre & post 1948), England (1330 Edward longshanks), Romans under titus, Russia pogroms and Germany who got rid of them from their nations nazi german's too? No. Driven into DESERTS ages ago! Don't wonder why after all those exilings above.
Should anyone doubt any of this see Jacob Javits' crony Rosenthal spill the beans on it https://www.youtube.com/watch?v=D4zMVZ8HnFI/ where he called all Christianity fools for helping Israel and the biggest scam of all time per their beliefs below from their Talmud.
This is the province of the synagogue of Satan (Pharisees whom Jesus Christ himself kicked to the curb out of the temple & they killed him for it. Jeremiah did the same to them also + the Essenes could not stand them either breaking away from the pharisee corruption):
Jew Talmud excerpts (the book that calls Christ's mother a whore & a bastard of a roman soldier):
1. Sanhedrin 59a: "Murdering Goyim is like killing a wild animal."
2. Abodah Zara 26b: "Even the best of the Gentiles should be killed."
3. Sanhedrin 59a: "A goy (Gentile) who pries into The Law (Talmud) is guilty of death."
4. Yebhamoth 11b: "Sexual intercourse with a little girl is permitted if she is three years of age."
5. Schabouth Hag. 6d: "Jews may swear falsely by use of subterfuge wording."
6. Hilkkoth Akum X1: "Do not save Goyim in danger of death."
7. Hilkkoth Akum X1: "Show no mercy to the Goyim."
8. Choschen Hamm 388, 15: "If it can be proven that someone has given the money of Israelites to the Goyim, a way must be found after prudent consideration to wipe him off the face of the earth."
9. Choschen Hamm 266,1: "A Jew may keep anything he finds which belongs to the Akum (Gentile). For he who returns lost property (to Gentiles) sins against the Law by increasing the power of the transgressors of the Law. It is praiseworthy, however, to return lost property if it is done to honor the name of God, namely, if by so doing, Christians will praise the Jews and look upon them as honorable people."
10. Szaaloth-Utszabot, The Book of Jore Dia 17: "A Jew should and must make a false oath when the Goyim asks if our books contain anything against them."
11. Baba Necia 114, 6: "The Jews are human beings, but the nations of the world are not human beings but beasts."
12. Simeon Haddarsen, fol. 56-D: "When the Messiah comes every Jew will have 2800 slaves."
13. Nidrasch Talpioth, p. 225-L: "Jehovah created the non-Jew in human form so that the Jew would not have to be served by beasts. The non-Jew is consequently an animal in human form, and condemned to serve the Jew day and night."
14. Aboda Sarah 37a: "A Gentile girl who is three years old can be violated."
15. Gad. Shas. 2:2: "A Jew may violate but not marry a non-Jewish girl."
16. Tosefta. Aboda Zara B, 5: "If a goy kills a goy or a Jew, he is responsible; but if a Jew kills a goy, he is NOT responsible."
17. Schulchan Aruch, Choszen Hamiszpat 388: "It is permitted to kill a Jewish denunciator everywhere. It is permitted to kill him even before he denounces."
18. Schulchan Aruch, Choszen Hamiszpat 348: "All property of other nations belongs to the Jewish nation, which, consequently, is entitled to seize upon it without any scruples."
19. Tosefta, Abda Zara VIII, 5: "How to interpret the word 'robbery.' A goy is forbidden to steal, rob, or take women slaves, etc., from a goy or from a Jew. But a Jew is NOT forbidden to do all this to a goy."
20. Seph. Jp., 92, 1: "God has given the Jews power over the possessions and blood of all nations."
21. Schulchan Aruch, Choszen H
trendTIC reports that during this interview, the Redbanc employee was asked to download, install, and run a file named ApplicationPDF.exe, a program that would help with the recruitment process and generate a standard application form.
LOL, what idiots
What are you saying, job interviews make you stupid? I don't think so. It's just like pointing at "holding a cell phone" as being the culprit for car accidents (obligatory car analogy alert). That's just not true. The people who'll cause accidents holding cell phones are the same people who used to cause accidents fumbling with the radio or the next cassette to play. That is, their attention isn't on the road, regardless of what their attention is focused on. So here, the guy's attention wasn't on what he was doing. That's how "social engineering" works.
And of course the long-standing problem that the "OS-like" crap on most people's computers is outright unsafe to use, making such people prime targets for tricking into doing things they're not supposed to. There are so many things they're not supposed to do, just making them do any one of those things is, well, pretty easy really.
Now, if you read the summary, it's "hackers! this", "hackers! that", "hackers! the other", and that makes it the usual content-free idiocy that msmash loves so much. And then getting the little content that was in there utterly wrong. Congratulations, dear "editor", don't go driving please.
"known to have associations to the Pyongyang regime" Seriously? If they are operating out of North Korea they are just stooges for that Joffrey wannabe. Get it straight. There is no Pyongyang regime. There is no North Korean government. It's just that piece of slime. Every news report or article that says something like "the North Korean government did or said thus and so" should get the publisher slapped silly. They know his name.
Just reading the headline, I was thinking if N. Koreans can bypass your security, you're a piece of red meat in the jungle filled with hungry amateur hackers.
It was "EggShell" security, a hard perimiter with no protection once it cracks. Any breach and -everything- is lost.
I am not sure that it counts as any security at all, these days...
Redbanc is an ATM monopolistic corporation owned by the local Banks around here.
“The dropper used to deliver the malware is related to the PowerRatankba, a Microsoft Visual C#/ Basic .NET (v4.0.30319)-compiled executable” ref
.. insert one of China/Russia/Iran/NORK/Venezuela ..or who ever else the deepstate is trying to pick a fight with ..
they ask for your SS# as part of the application and that in it self it is bad.
In Chile the RUT (Unique Identification Number) is not secret. There are third party web sites that find a RUT given your name, and those are not illegal.
This had NOTHING to do with LinkedIn or Skype. The victim was tricked into downloading and installing a sketchy executable, which basically opened the door for the attack. The attackers simply used LinkedIn as the social engineering tool, and Skype was just a word used in the job listing.