FireEye links North Korean cyberthieves to a recent spate of spearphishing attacks against South Korea.
North Korean cybercriminals may increasingly steal Bitcoins and other cryptocurrencies, following the sanctions imposed Monday by the United Nations Security Council over North Korea's persistent nuclear testing, according to a FireEye blog post.
The sanctions, which include capping North Korea's oil imports and banning the country's profitable textile export business, may fuel even more spearphishing attacks against South Korea's cryptocurrency exchanges and other nations' exchanges, FireEye asserts, as North Korean actors seek to fund the government's activities and the pocketbooks of the country's elite.
Last year, FireEye says it noticed North Korean actors shifting their focus from cyber espionage to crimes against traditional banks and financial institutions around the globe. That shift was likely the result of North Korean actors trying to raise funds for government's activities, according to FireEye.
But beginning in May, the security firm says it observed at least three incidents where North Korean actors targeted South Korean cryptocurrency exchanges. The cyberthieves attacked the personal email accounts of employees at the exchanges, and often used bogus tax-related messages as the lure, according to FireEye. The attacks used malware called PEACHPIT, which FireEye links to previous malware used by North Korean actors in last year's attacks against global banks and financial institutions.
Read more about the North Korean cryptocurrency attacks here.
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024