3 ms·
Been looking in that article to find how they concluded it's from North Korea, but I can't find it. Can anyone point it out for me?
by lizardactivist 5y ago
Been looking in that article to find how they concluded it's from North Korea, but I can't find it. Can anyone point it out for me?
- buzzert 5y agocrickets
- eli 5y agohttps://www.clearskysec.com/wp-content/uploads/2020/08/Dream-Job-Campaign.pdf https://www.clearskysec.com/wp-content/uploads/2020/08/Dream...
- dmix 5y ago> Analysis of the files shows, that they cannot run on computers that have the Korean, Japanese, or Chinese language preferences Interesting seeing Japanese here but might just be a language thing. > LinkedIn profile Protection – we believe that LinkedIn has yet to develop sufficient security mechanisms and protect its users against impostor accounts. We find it alarming that a fictitious profile, copycat an existing account, can be open and use without alerting to source profile from which the information was stolen, as well as profiles contacted by the new imposter profile. Sounds like some low hanging fruit
- boomboomsubban 5y agoThat's a report from 2020, how would it show this exploit found in 2022 was from North Korea?
- tptacek 5y agoThey're unlikely to tell you, at least not the level of satisfaction a nerd message board demands, for some of the same reasons we don't know about all the anti-abuse mechanisms on HN; because attribution and obfuscation (like abuse/anti-abuse on HN) is an arms race/cat-and-mouse game.