2 ms·
For CVEs? No. CVEs are awarded for things as (relatively) little as static keys being packaged with APKs. What is unusual is that NK used a sophisticated attac
by no-dr-onboard 5y ago
For CVEs? No. CVEs are awarded for things as (relatively) little as static keys being packaged with APKs.
What is unusual is that NK used a sophisticated attack chain to successfully pwn a hardened industry (notably, fintech).
At this point I think it’s safe to say that NK is a significant competitor to FVEY in terms of cyber warfare capabilities.
- thefunnyman 5y agoI would say this isn’t necessarily unusual for NK. As far as I know, they’re the only nation state actor known to hack for profit and they’ve committed several of the largest cyber bank robberies ever. Nation state actors have an _incredible_ amount of time, resources, and motivation.
- no-dr-onboard 5y agoIndeed. The amount of skill they've demonstrated as Lazarus (Lazarus Leaks (Vault 7), the Bangladesh Bank Heist, and Dark Seoul) is certainly notable and this seems to fit well within their MO.