this post was submitted on 22 Jul 2023
0 points (50.0% liked)

netsec - Network Security

427 readers
1 users here now

This is the netsec Community, a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise - to provide value to security practitioners, students, researchers, and hackers everywhere.

Content Guidelines:

Discussion Guidelines:

Prohibited Content:

founded 2 years ago
MODERATORS
top 2 comments
sorted by: hot top controversial new old
[โ€“] DogMuffins@discuss.tchncs.de 0 points 2 years ago (1 children)

Whenever I hear about hackers in North Korea I always wonder how they could support a sophisticated info sec agency with advanced capabilities. I guess I just assumed there isn't really a thriving tech community in NK from which to recruit.

I honestly don't know, maybe this attack is as simple as tricking a maintainer into merging a sketchy commit, and not that sophisticated?

Or do they "purchase capability" from supporters like China or Russia?

[โ€“] dubbel@discuss.tchncs.de 1 points 2 years ago

This attack does seem to be on the simpler side technically.

NK recruits their hackers straight from the elite-ish high schools, trains them in computer science, and send them abroad with the objective to earn money through any technical means. How exactly they do it is pretty much up to them.

I can highly recommend the podcast "The Lazarus Heist" if you want to know more about NKs state hacking ventures: http://www.bbc.co.uk/programmes/w13xtvg9

RSS address: https://podcasts.files.bbci.co.uk/w13xtvg9.rss