6 ms·
OK, so I know this is going to come up in the comments, but this is not remotely a baseless allegation. The Lazarus group (one of the names for the DPRK-associa
by openasocket 9y ago
OK, so I know this is going to come up in the comments, but this is not remotely a baseless allegation. The Lazarus group (one of the names for the DPRK-associated APT group) is somewhat well known and is quite sophisticated. This is the same group that hacked Sony a few years back. And to preempt people who are going to chime in with "Sony was just some insider leaking data" there is extensive evidence showing it was the work of a previously unidentified APT group. See here: https://www.operationblockbuster.com/wp-content/uploads/2016/02/Operation-Blockbuster-Report.pdf https://www.operationblockbuster.com/wp-content/uploads/2016...
I can't comment about specifics linking WannaCry to the Lazarus group, but that seems to be the consensus in the security community.
DISCLAIMER: I worked with the people who wrote that report
- 52-6F-62 9y agoRe: Sony Hack I heard that the DPRK was definitely involved, but that they involved themselves at a later point in the publicity over the attack, and that it the original attack was initiated by disparate individuals only loosely cooperating. Not to disparage your points on the Lazarus group. I've heard the same about their sophistication. I know next to nothing about the WannaCry attack besides the tragedy of the NHS succumbing to it.
- cottsak 9y agoIt's not been fully confirmed/established that Lazarus group == DPRK: see "false flag" from Kaspersky researchers https://www.wired.com/2017/05/wannacry-ransomware-link-suspected-north-korean-hackers/ https://www.wired.com/2017/05/wannacry-ransomware-link-suspe...
- openasocket 9y agoIn that link they only raise doubts about Lazarus being behind WannaCry, not Lazarus being associated with the DPRK. And the Kapersky researchers' quote says that this being a false flag is "possible" but "improbable"
- cottsak 9y agoAgreed, confirming that there is no public evidence which hard links Lazarus to DPRK. Just want everyone to know the facts.
- deleted 9y ago[deleted]
- openasocket 9y agoWhat would a "hard link" be? A signed confession from the head of the DPRK military? Under the circumstances, barring classified intelligence (like the NSA may have), we are as sure as we can be.
- quakeguy 9y agoSo we are unsure.
- openasocket 9y agoOut of curiosity, what evidence would convince you?
- tracked24x7 9y agoCollin Powell got quite a lot of tonnage I mean mileage out of a cartoon drawing. Just draw him a picture.
- boomboomsubban 9y ago
- jhiska 9y agoHow did you prepare such a thought-out comment so fast after the post appeared?!? You're amazing. Thank you for taking the time to share that info with us!
- jorblumesea 9y agoIt also makes some practical sense, as NK regime has little in the way of hard foreign currency and bitcoins would be a great source of untraceable unsactionable income. Their previous adventures in illegal activities (counterfeit bills, meth, prostitution and slave labor) show they are not above deviousness to achieve stable income for the Kim state.
- DaiPlusPlus 9y agoSupposing North Korea has Bitcoins... how could they sell them in a way that grants them usable currency?
- jorblumesea 9y agoThe same way N. Korea does everything overseas, foreign agents and "diplomats" that act couriers. China would be the obvious conduit as bitcoin is widely accepted there.
- adventured 9y agoNorth Korea has the world's #2 and #3 economies next door, and both increasingly like Bitcoin. China has a significant appetite for Bitcoins, even more so with the capital controls now in place. That's a pretty easy black market trade.
- mc32 9y agoI'd venture to say #3 has no love lost for N Korea so highly doubt #3 would look kindly at aiding and abetting N Korea. #2 is rather frustrated with the DPRK regime and have tightened commerce with the regime.
- ryanlol 9y agoIt's trivial to exchange Bitcoins anonymously to cash almost anywhere in the world.
- discordance 9y ago
- matank 9y agoI am curious about how big these groups are? 10-100-1000 people? Seems like a lot of stuff has to come together for a "win". It's hard to imagine experts sitting around the whole day finding this motivating work.
- gjjrfcbugxbhf 9y ago> DISCLAIMER: I worked with the people who wrote that report In other words trust us we are sooo much smarter than you mere plebs...
- gjjrfcbugxbhf 9y agoThe op made a bunch of assertions provided a reference which refuted one of her assertions and then appealed to authority...
- sctb 9y agoThe guidelines that ask us to comment civilly always apply, no matter what you're replying to. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- gjjrfcbugxbhf 9y agoBoth posts were civil. I guess we'll have to put it down to cultural differences.
- sctb 9y agoSnarky dismissals are not considered civil here.
- deleted 9y ago[deleted]
- gjjrfcbugxbhf 9y agoPlease re read your post considering your tone and level of snark. I had actually flagged it on this basis. But i guess as you are a moderator this won't have done anything.
- nthcolumn 9y agoSo this 'quite sophisticated' group suddenly became completely inept. Who the hell do NSA take us for? There are no specifics just copypasta and diversion. Oh yeah this thread is full of it. Consensus! BS more like. pure, unadulterated, prairie fresh by the shit-ton.