North Korea’s hackers launch attacks following action on sanctions
Researchers suggest Kimsuky phishing attempts follow predictable pattern
North Korea appears to ramp up cyberattacks against some U.S. organizations within weeks after new sanctions are imposed or existing ones are enforced, a report by the RAND Corporation published earlier this month suggests. Researchers said they analyzed phishing attacks against RAND attributed to the DPRK-linked Kimsuky group over the course of two years, and found a high correlation between sanctions activity and attempts to trick RAND staff into clicking malicious links.
“Anything related to sanctions — whether new ones are imposed, removal of existing ones is denied in negotiations, or violations of existing ones are claimed
- 01North Korea’s new cruise missile: Nothing to worry about?
- 02Japan’s next leader has a chance to reshape the country’s North Korea policy
- 03After military parade, Kim Jong Un takes another two-week break from public view
- 04The contentious field of North Korean studies: Schools of thought and divisions
- 05NK Pro briefing: Why satellite imagery plays a critical role in DPRK research
- 06North Korean disinfection zone still not operating despite activity: imagery
- 07North Korea’s new train-launched missiles are impressive, but not a game-changer
- 08With foreign minister’s visit, China seeks to coax Seoul away from US