North Korean hackers targeted Russia – media — RT Russia & Former Soviet Union

The North Korean hacker group APT37 attacked the Russian International Ministry and its staff in late 2021 and subsequently compromised the account of a authorities worker, US data safety consultants have reported.

In line with researchers at US cybersecurity corporations Cluster25 and Black Lotus Labs, and later reported by Moscow each day Kommersant, a phishing marketing campaign was focused on the Ministry again in October. The researchers declare that some staff have been despatched archives of paperwork and requested to offer vaccination particulars, whereas others have been fed with hyperlinks to malware disguised as software program the Russian authorities makes use of to gather Covid vaccination statuses. Because of this, one account was compromised.

From the compromised tackle, hackers managed to ship a phishing electronic mail to Russian Deputy Minister Sergey Ryabkov on December 20 and likewise focused the Russian Embassy in Indonesia.

APT37 is well-known for utilizing software program known as Konni, a distant administration instrument. It has been reportedly used to focus on South Korea, in addition to political organizations in Japan, India, and China, amongst different nations. In line with Kommersant, the group has been round since at the least 2017.

This newest accusation isn’t the primary time that North Korea has been blamed for tried phishing assaults on Russia. In November final 12 months, Kommersant reported that one other hacker group, Kimsuky, despatched phishing emails written on behalf of well-known Russian consultants, scientists, and NGOs to consultants on Korea in an try and receive on-line login credentials.

Final week, Russian safety providers arrested a infamous group of hackers following data supplied by US authorities. The Federal Safety Service (FSB) detained folks in Moscow, St. Petersburg, and Lipetsk Area who have been allegedly members of REvil, a infamous ransomware group recognized for receiving hundreds of thousands in ransom funds.

You may share this story on social media:

Comply with RT on