Home Cyber Attacks Experts found targeted attacks by hackers from North Korea on Russia
Kaspersky Lab revealed that the well-known North Korean hacker group Lazarus has become active in Russia. The attackers attack through applications for cryptocurrency traders in order to steal data for access to the wallets and exchanges. In addition, the group collects research and industrial data. Experts believe that hackers are particularly interested in the military-space sphere, energy and IT, and the interest in bitcoin can be explained by the need for North Korea to bypass sanctions The first cases of Lazarus targeted attacks on Russia appeared at the beginning of last year. According to Kaspersky Lab, since at least spring 2018 Lazarus has been carrying out attacks using the advanced MATA framework. Its peculiarity is that it can hack a device regardless of what operating system it runs on — Windows, Linux or macOS. According to Kaspersky Lab, the victims of MATA include organizations located in Poland, Germany, Turkey, South Korea, Japan and India, including a software manufacturer, a trading company and an Internet service provider. Several waves of attacks have been detected this year. So, this month, Lazarus attacks were discovered in Russia, during which the backdoor Manuscrypt was used. This tool has similarities to MATA in the logic of working with the command server and the internal naming of components. "After studying this series of attacks, we conclude that the Lazarus group is ready to invest seriously in the development of tools and that it is looking for vict ..
Support the originator by clicking the read the rest link below.
