Experts expose growing threat from hackers supporting North Korea

A group of alleged cybercriminals has been using several techniques to target U.S. companies and government agencies on behalf of the North Korean government, according to experts.

Cyber intelligence analysts at Google have identified what is known as an "advance persistent threat" (APT), or a group of bad actors who have been connected to potentially criminal activity online.

Designated as "APT43" in a new report from Google Cloud's cyber intelligence arm Mandiant, the group is believed to be supporting -- and possibility affiliated with -- North Korea's primary foreign intelligence service through espionage targeted at foreign government agencies, private companies and educational institutions around the world.

"Although the overall targeting reach is broad, the ultimate aim of campaigns is most likely centered around enabling North Korea's weapons program, including: collecting information about international negotiations, sanctions policy, and other country's foreign relations and domestic politics as these may affect North Korea's nuclear ambitions," the report found.

Analysts have observed a flurry of activity from APT43 going back to 2018 with efforts focused on spear-phishing campaigns that aim to harvest private user information. This approach involves "social engineering" in which the bad actor engages and attempts to develop a rapport with real people in an attempt to solicit valuable information.

In one case, APT43 was observed attempting to establish a relationship with a potential victim by impersonating a journalist with an email titled "Request for comments" and questions about geopolitical responses to North Korean military expansion.

To support these efforts, the report found the group engages in stealing and laundering cryptocurrency. Once the currency is stolen -- typically by harvesting private online user information -- the group was observed laundering the assets through websites that generate new forms of crypto for a fee. That process effectively removes the open source connection to the original payment, experts said.

"Put another way, imagine you stole millions of dollars in gold, and while everyone is looking for stolen gold, you pay silver miners with stolen gold to excavate silver for you," Mandiant Principal Analyst Michael Barnhart said. "Similarly, APT43 deposits stolen cryptocurrency into various cloud mining services to mine for a different cryptocurrency. For a small fee, DPRK walks away with untracked, clean currency to do as they wish."

A person touches a keyboard in this stock image.

STOCK PHOTO/Getty Images

Mandiant's newly released report is in line with strategies established by the Biden administration's top cybersecurity officials to encourage information sharing about cyber threats.

One app that could pose a cyberthreat, according a very senior official, is TikTok. Cybersecurity and Infrastructure Security Agency Director Jennifer Easterly told lawmakers Tuesday she supports banning the Chinese-owned social media giant, which has seized on short-form video-sharing on a massive scale, calling anything of its kind a "huge, huge risk."

"I think we need to be really, really mindful of not just TikTok -- That's an important and prominent issue … [but] it's all sorts of Chinese technology that's in our critical infrastructure supply chain. We need to be very concerned about that. And then frankly, from a strategic level, we need to be very concerned," she said.

Despite the prevalence of the threat, Easterly expressed doubt about whether a full ban would be possible in the United States. Virtual private networks and other cyber tools can be used to change and scramble geolocation data on the open internet, making a U.S. ban difficult, experts say.

CISA, one of the leading agencies working to establish cybersecurity reporting norms and standards, will work to help victims of cybercrime and strengthen vulnerable institutions, Easterly vowed.

"We are not here to name to shame to stab the wounded," she said. "We are here to render assistance and then to use that data very importantly, to protect the rest of the ecosystem. If you're in a neighborhood and your neighbor gets robbed, I want to know that so you can actually lock your doors and put your guard dog out. It's important for our collective defense. We are facing some very, very serious threats to our nation to our critical infrastructure."

The director said CISA is working to improve its own "visibility into the overall ecosystem" of cyberattacks while acknowledging the agency's limitations. Easterly referenced her time in the private sector where the "return on investment was things not happening."

"So you know at a broad level, bad things not happening is hard to -- hard to measure," Easterly said. "So what we want to do is get more granular with the visibility what we've gotten out of that [budget] to say this is how we've reduced the incidence of bad things happening."

However, cybersecurity authorities -- and Easterly herself -- have raised alarms about the daily onslaught of cyberattacks from outside the U.S. As part of efforts to counter these threats, CISA puts out cybersecurity road maps to help government and industry reduce risks, including by providing security consultants that offer direct assistance to state and local government bodies.

Rep. Andy Harris, R-Md., pressed Easterly on whether CISA would have had any involvement with suppressing stories about the laptop belonging to President Joe Biden's son Hunter. The director swiftly dismissed the assertion, noting she wasn't in the job at the time and outlining the disinformation work the agency should do to support local governments.

"What I want to talk about is what our actual mission what we're doing for state and local election officials who have asked for our help in dealing with foreign influence and disinformation operations," Easterly said. "And that is to support them in amplifying their trusted voices and providing them what they need to be able to ensure that the American people have confidence in the integrity of their elections. And this is not a partisan issue, sir."


Football news:

<!DOCTYPE html>
Kane on Tuchel: A wonderful man, full of ideas. Thomas in person says what he thinks
Zarema about Kuziaev's 350,000 euros a year in Le Havre: Translate it into rubles - it's not that little. It is commendable that he left
Aleksandr Mostovoy on Wendel: Two months of walking around in the middle of nowhere and then coming back and dragging the team - that's top level
Sheffield United have bought Euro U21 champion Archer from Aston Villa for £18.5million
Alexander Medvedev on SKA: Without Gazprom, there would be no Zenit titles. There is a winning wave in the city. The next victory in the Gagarin Cup will be in the spring
Smolnikov ended his career at the age of 35. He became the Russian champion three times with Zenit

3:19 Diamondbacks World Series bettor four wins away from $1 million payout
3:09 Giants legend Carl Banks slams WFAN hosts for Kayvon Thibodeaux rip job
3:01 Struggling Oilers will be missing injured star Connor McDavid vs. Rangers
2:52 Elias Manoel notches hat trick as Red Bulls advance in playoffs
2:48 Disgraceful Karine Jean-Pierre’s words are just callous amid Hamas violence
2:46 SEAN HANNITY: The People's House is now officially back in business
2:42 At least 16 killed in shootings in Maine, law enforcement officials say
2:40 Georgia murder fugitive kills self when police on hunt for other escaped inmates show up at door
2:31 US Auto Workers Union Reaches Preliminary Deal With Ford
2:29 Jayson Tatum shades new Celtics teammate Jrue Holiday: ‘You old’
2:24 Magazine scrubs sections of Jake Sullivan’s essay praising Biden’s performance in the Middle East
2:21 Nets’ opening-night comeback falls short in last-second heartbreaker vs. Cavaliers
2:18 JESSE WATTERS: We have a compromised president in the White House
2:10 Kristaps Porzingis’ late heroics sink Knicks in crushing opening-night loss
2:09 FBI hindered Hunter probe — and David Weiss skipped briefing on Biden bribery allegations, US attorney testifies
1:54 At least 16 killed in shooting in Maine, law enforcement officials says
1:54 At least 16 killed in shooting in Maine, law enforcement officials say
1:51 Sterling Shepard in punt return mix vs. Jets despite Commanders muff
1:47 Craig Counsell’s true Mets intentions are about to become clear
1:45 Tim Wakefield's wife, Stacy, shares powerful message late husband left for her
1:41 Kyle Richards ‘taken aback’ by Mauricio Umansky, ‘DWTS’ partner Emma Slater holding hands: Something is ‘going on there’
1:37 Ford and UAW reach tentative agreement that would end 6-week strike
1:36 LAURA INGRAHAM: This is a propaganda victory for Hamas
1:35 Actor Zachery Ty Bryan pleads guilty to felony assault stemming from domestic violence arrest
1:26 NYC college's Jewish students seen locked inside library as anti-Israel protest moves through building
1:24 Blackpink’s Jisoo and actor Ahn Bo-hyun split after brief romance: report
1:20 Police respond to active shooter in Lewiston, Maine; medical center treating 'mass casualty event'
1:20 At least 22 dead, up to 60 wounded in mass shooting in Lewiston, Maine
1:20 Stream It Or Skip It: ‘30 Coins’ Season 2 on Max, The Return Of This Ambitious Religious Horror Series From Spain (Now With More Paul Giamatti!)
1:19 Panthers' Frank Reich voices support for QB Bryce Young amid winless start: 'We got the guy we wanted'
1:17 NYC driver, 40, charged with attempted murder for shooting at off-duty detective
1:15 Alligator gar caught in Texas weighing 283 pounds shatters multiple records: 'Four in one fell swoop'
1:06 Sen. Tim Scott calls for the deportation of foreign students supporting Hamas 
1:06 More than 10 dead, dozens injured in Lewiston, Maine mass shooting, sources say
1:04 Jets’ defensive line looking to up sack numbers in battle vs. Giants
1:03 John Stamos reveals what Mary-Kate and Ashley Olsen said at Bob Saget’s funeral: ‘It was so beautiful’
1:01 See ‘The Crown’ recreate Princess Diana’s historic landmine walk
1:00 Joe Rogan expresses nostalgia for Trump era, says country was 'without a doubt' better than under Biden
1:00 Erika Jayne Reveals ‘RHOBH’s Biggest Pot-Stirrer Now That Lisa Rinna Is Gone: “I Think We All Have Moments”
0:56 US, Australia Reaffirm Shared Values, Cooperation Against Chinese Ambitions 
0:56 Hunter Biden missing from state dinner guest list after backlash for attending others amid legal issues
0:55 Rams coach Sean McVay invokes 'higher power' when talking newborn son: 'There's something special going on'
0:47 Alexis Lafreniere finally could be primed for Rangers’ breakout
0:46 Giant pandas to leave the National Zoo in D.C. for China earlier than expected
0:43 Fans slam Mauricio Umansky for telling Kyle Richards he won’t ‘allow’ any more tattoos
0:42 ‘Southern Charm’ alum Kathryn Dennis’ SUV involved in alleged hit-and-run at elementary school
0:35 No sex please, we’re Gen Z — young viewers want deeper, more unique relationships in film, on TV: study
0:34 Cooper Union barricades Jewish students inside library as pro-Palestine protesters bang on doors
0:34 Active shooter situation in Lewiston, Maine: Police
0:34 UAW reaches tentative labor agreement with Ford
0:33 Giants’ Andrew Thomas practices lightly but unlikely to face Jets
0:31 Active shooter situation in Maine, city residents told to 'stay inside with doors locked'
0:28 Falcons head coach dismisses concerns after Bijan Robinson's surprisingly low usage: 'There's nothing'
0:24 AI predicts a third of breast cancer cases prior to diagnosis in breakthrough mammography study
0:24 UAW reaches tentative deal with Ford: Sources
0:19 Sean McVay’s wife Veronika Khomyn gives birth to baby boy
0:18 Ex-‘incel’ threatened to shoot up ‘chads and stacies’ at University of Arizona: feds
0:17 Florida duo allegedly stabbed man repeatedly, threw him over bridge, stole car and set it on fire: authorities
0:12 Who is Rep. Mike Johnson, the new House speaker?
0:11 Yankees have had 'preliminary' conversations to trade for Juan Soto: report
0:09 California man breaks into Jewish family's home, threatens to kill them, yells 'Free Palestine'
0:08 ‘Breakfast Club’ host DJ Envy has no apologies for promoting a con man newly arrested for fraud
0:08 Biden team sees 2024 opportunity with GOP's new speaker, and more campaign takeaways
0:07 UAW closing in on tentative labor agreement with Ford
0:05 Biden must stop using defense partnerships as an excuse to cut Pentagon spending
0:02 Shakira fans blame karma after singer’s ex Gerard Piqué falls into stage hole: ‘Don’t disrespect the stage queen’
0:00 Obama’s warning to Israel: Letters to the Editor — Oct. 26, 2023
0:00 Clarence Thomas loan for luxury RV was forgiven, Senate Democrats say
0:00 ACLU sues Tennessee for 'criminalizing HIV' with strict prostitution laws
23:59 Who is Rep. Mike Johnson, the House GOP's latest speaker nominee?
23:56 White House state dinner celebrates Australia ties, nods to Israel-Hamas war
23:56 Drone video shows Mexican drug cartels throwing explosives along Texas southern border
23:54 Bear attacks security guard in Aspen hotel, remains on the loose, Colorado wildlife officials say
23:51 Beyoncé shares rare video talking to fans as she unboxes her new perfume: ‘It’s finally here’
23:48 'The Young and Restless' star Christian LeBlanc reveals cancer diagnosis after 'fans caught' sign of disease
23:44 Diana Nyad goes the distance in new film on Cuba-Florida swim feat
23:41 Jewish American students outraged by rising antisemitism in US amid Hamas terror attacks on Israel
23:39 Mike Johnson Won The Worst Job In Washington: Speaker of a Broken House
23:38 Lindsay Clancy, Massachusetts mother who strangled her 3 children, researched 'ways to kill,' court docs say
23:38 Jets’ matchup with Giants a reminder of how quickly things change
23:32 Nikki Haley rips Biden over antisemitism on college campuses — and vows to fix it
23:30 Mel Tucker sexually harassed Brenda Tracy, Michigan State investigation reveals
23:29 Brian Austin Green slams ‘DWTS’ for excluding fiancée Sharna Burgess from Len Goodman tribute
23:24 LeBron James' minutes restriction likley the new norm as superstar enters new chapter
23:21 FDA looking into claim woman died after drinking Panera Bread lemonade
23:20 North Dakota Legislature rewrites budget bill, ending special session in 3 days
23:19 'Squad' Democrats vote against condemning 'barbaric' Hamas attack on Israel
23:18 Wisconsin officials pass new wolf management plan, but population goal absent
23:17 UN chief’s justification for Hamas attacks shows the organization is worse than useless
23:16 Former Congressman Mark Walker drops out of North Carolina gubernatorial race to launch Congressional bid
23:15 Over 70 left ill following multi-state salmonella outbreak tied to onions
23:14 Husband of Cardi B’s manicurist charged with setting wife’s new NYC salon on fire
23:10 Elon Musk rolls out audio, video on X as he seeks to make it an ‘everything app’
23:09 UnScientific American, Trump is yesterday’s man and other commentary
23:09 Customer freed after spending night trapped inside NYC bank vault
23:07 ‘F–k Israel’ graffiti scrawled across Cornell University campus sidewalks
23:03 Dennis Quaid to host Fox Nation series 'Top Combat Pilot' debuting in November
23:00 Don La Greca goes off on ‘weakling’ Chris Russo’s retirement ‘gimmick
23:00 New report shows a majority of students attend schools with high or extreme levels of chronic absence
23:00 Biden administration pushes for a humanitarian 'pause' in Israel’s military campaign in Gaza