N. Korea Took in $2B in Cyberattacks to Fund Weapons Program: U.N. Report

https://www.reuters.com/article/us-northkorea-cyber-un/north-korea-took-2-billion-in-cyberattacks-to-fund-weapons-program-u-n-report-idUSKCN1UV1ZX

by atlasunshrugged • 7 years ago

121 61 7 years ago

reuters.com

dmix• 7 years ago

Considering the lack of blow back this has generated it seems to be a successful operation on NK's part. Who knows, maybe there will be some future consequences, but everyone globally is so focused on their nukes this seems to get lost on the side. Plus the intel agencies care more about offensive operations and hiding their capabilities, so they don't seem to be making much noise about all this to the public either (not that law enforcement is their job).

tfha2• 7 years ago

If I could prevent NK from getting Nukes, or I could prevent NK from stealing billions from banks... seems pretty reasonable that nukes are still the focus

bronco21016• 7 years ago

But aren’t the billions a prerequisite for nukes? At the end of the day they’re still going to need money to make things happen with regards to the nukes. Unless they’re able to go from raw material to facilities and missiles purely from slave labor?

AnimalMuppet• 7 years ago

Get your enemies to pay for your weapons. Neat trick, if you can pull it off. I'd be more impressed if they used the money to feed their people, though.

onetimemanytime• 7 years ago

Military first is the rule. I wonder if they managed to get the stolen money, meaning cash it out. They might have stolen $2B but that money or coins might still be off limits to NK.

cronix• 7 years ago

The article talks about laundering, which is cashing it out.

alasdair_• 7 years ago

The moment the NK people are well fed and able to focus on things other than survival is the moment that the regime will be overthrown.

uncoder0• 7 years ago

The same goes for firearms. The moment they can defend themselves is the moment they take the food and resources for themselves. Having your population near starvation and defenseless is the main method used to maintain power as an oppressive fascist regime.

anigbrowl2• 7 years ago

I don't think so. Lots of people assume the North Koreans have the same sort of aspirations as westerners do. While they are of course massively indoctrinated and propagandized, don't underestimate the possibility of a fortress nation building a social identity around standing up to all the bigger countries that threaten it. Many such societies have existed in history.

A2017U12• 7 years ago

You would be saying the same thing about China 30 years ago.

It's completely wrong in my opinion. Massive failure of cultural projecting by westerners to actually believe this.

Many people just want to be well fed and have safety for their small circles, they truly don't give a shit about politics. What's the US federal election turnouts again :) ?

michalxnet• 7 years ago

I will guess even more. And add some drug money lets say about ~$1.3B

Two years ago:

The World Once Laughed at North Korean Cyberpower. No More.

https://www.nytimes.com/2017/10/15/world/asia/north-korea-ha...

Scaevolus• 7 years ago

There's probably large-scale counterfeiting, too! https://en.wikipedia.org/wiki/Superdollar#North_Korea

rolltiide• 7 years ago

North Korea has generated an estimated $2 billion for its weapons of mass destruction programs using “widespread and increasingly sophisticated” cyberattacks to steal from banks and cryptocurrency exchanges

I'm more interested in how this proves cryptocurrency markets are liquid enough. Enterprises of all sizes can get in and out of a portfolio of the largest cryptocurrencies.

ju-st• 7 years ago

How is it possible to attribute cyberattacks to a state sponsored hacking programme?

mises2• 7 years ago

Very. Honestly, they're often not that stealthy (especially N. Korea and Iran) because they have the mantle of an evil regime behind which they can hide. China and Russia barely moreso. Companies with whom I work have been ransomed by these actors, and the FBI has almost always said they know who did it and can do nothing. Policy set higher than them.

lawnchair_larry2• 7 years ago

Many ways. It’s hard to move $2B while being the target of several rival states intelligence gathering and not leave a trail that leads back to you.

jdm22122• 7 years ago

Often, our intel has hacked their intel and watched them do it.

For example: the US is certain that North Korea was behind the Sony hack because South Korean intelligence hacked North Korean intelligence, and the NSA hacked South Korean intelligence. So the NSA found that it could access Sony servers by going through SK intel to NK intel to Sony.

Another example: one of Cozy and Fancy Bear (don't remember which) is known definitely to be Russian because Dutch intelligence hacked the CCTV cameras outside their Moscow office and was able to correlate times when they conducted spearphishing operations with times when known Russian government hackers were in the office and specific, spearphishing-related Google searches were being issued from computers in the office.

pfundstein• 7 years ago

Russian hackers using Google instead of Yandex or other? Or is Google here a metaphor for 'searching the internet'?

kpthrow• 7 years ago

1) A classified attribution involving intelligence collection. It could be anything from corrupted foreign officials to hacking

2) A law enforcement investigation would ideally be built upon a collection of circumstantial evidence combined with mistakes by the hacker. In the case of Russia, one of their hackers forgot to log into the VPN before logging into the Guccifer social media account.

throwbaccAndy• 7 years ago

Most likely ip address.

mises2• 7 years ago

Three-letters have known this for years. I know of countless situations in which a company gets ransomware and the FBI has relayed that the attacker is known, it's classified as terrorism, but nothing will happen. They've all seen it happen to many more companies. Basically, our government hasn't stood up to the evil communist bully that is little rocket man. He has committed horrible human rights violations, has attacked our companies (which is typically an act of war), and our government has done nothing.

lawnchair_larry2• 7 years ago

There is a difference between doing nothing and not telling mises from hackernews what they are doing.

mikedilger• 7 years ago

Does anyone have a good explanation or thoughts on why a confidential UN report was leaked to the media?

hannob• 7 years ago

Even if you keep the circle small you have a bunch of people who will have access to the report. Include some people who can gain access if they want to, e.g. IT staff.

It takes one of them who strongly believes that this information should be public knowledge.

sharadov3• 7 years ago

How are they training the hackers? Are they being educated abroad, or are they hiring foreign hackers? For a country living in the dark ages, how are they managing to pull this off?

FDSGSG5• 7 years ago

are they hiring foreign hackers?

Probably, but they wouldn't need more than one or two.

E: Actually, I should just refer to this awfully specific grugq take https://twitter.com/thegrugq/status/997114164131737600

tyingq3• 7 years ago

Agree with this in order of magnitude at least. Even if it's 10 and not 1 or 2, the costs are relatively low. They have drug and other money. Hire for aptitude, train the trainer. Everyone else is shackled by plausible deniability. DPRK gives zero f*cks. Best candidates, best training, whatever equipment, training, and info you want, and go...no bars held.

It's all about removing constraints.

sct202• 7 years ago

NK has a habit of abducting people with skills they want.

__john• 7 years ago

Would the Chinese government send it's "LulzSec" types to cyber work farms in NK? Or is something else more plausible?

A2017U12• 7 years ago

Pay brokers for zero day exploits.

Have a small team of highly paid well off young people with little incentive to take a "moral" stance.

Profit.

Also consider that perhaps they aren't living in the "dark ages" while right on the doorstep of one of the most technologically advanced nations on Earth? These events are happening 200km away from Seoul.

sharadov3• 7 years ago

That's exactly what I was thinking, is the Chinese government helping?

malloryerik• 7 years ago

The regime has at least six thousand full-time hackers. Some of those they send overseas to operate. The average North Korean doesn't get exposed to that much tech, but it's another story for specialists, and most of the things they need to learn can be found online. Of course learning materials will be curated and filtered by the most politically trustworthy who themselves will be under constant and multidimensional surveillance.

There are abundant sources online.

https://www.nytimes.com/2017/10/15/world/asia/north-korea-ha...

ourmandave• 7 years ago

Maybe we'll never hear about it but it seems strange we don't have counter cyber ops against their weapons programs, e.g. Israel Stuxnet and Iran's nuclear program.

somebodythere• 7 years ago

To think they don't is naive. The US has counter cyber ops against even their closest allies.

dsfyu404ed• 7 years ago

There's probably some guys in office buildings in Georgia and Maryland who are chucking in their heads as they read your comment.

choppaface2• 7 years ago

North Korea has substantial hydroelectric power, which could support a highly profitable crypto mining operation. I wonder how much hydropower they need before the opportunity cost of hacking exceeds that of mining crypto. I don’t think anybody wants them to spend money on weapons, but in the eventuality that they never go to war, it would probably be desirable to prevent theft.

FDSGSG5• 7 years ago

I don't see how the opportunity cost of hacking could ever exceed that of mining crypto.

choppaface2• 7 years ago

Crypto mining would provide a more stable cashflow and has a more limited downside versus theft. I see your point, given how successful the thieves have been. But I just wonder about the value of hydro power.

Ididntdothis2• 7 years ago

From whatever I have read so far North Korea government is pretty much a criminal organization like the Mafia . They forge money, sell drugs, abduct people, sell weapons. Pretty much anything is fair game as long as it makes money without any regard for health or life of their own people or foreigners . In addition they have a propensity for killing each other. I think it would make a great mob movie.

st1ck• 7 years ago

Totally, no other government, especially those cyber superpower countries, would ever do such immoral things.

cheeze• 7 years ago

Yeah. I can't imagine Russia ever doing something like Hacking an adversary or abducting someone.

Ididntdothis2• 7 years ago

Sure they all do that but I would argue that North Korea is on a different level.

reilly3000• 7 years ago

Indeed, a ‘beautiful vision for his country’.

coldtea2• 7 years ago

Sounds about as reliable a news as the WMDs of yore...

tareqak• 7 years ago

Could you please be a bit more specific about what you are trying to say?

coldtea2• 7 years ago

That there's all kind of propaganda around any enemy du jour, and don't believe everything that you hear, even if it comes from "expert groups" and "independent journalists".

Let's see in a few years...

anigbrowl2• 7 years ago

Sounds considerably more reliable since it's not coming from a single state actor

dreamcompiler• 7 years ago

The beautiful part here is that the DPRK has (effectively) no cyber infrastructure of its own to retaliate against. It's perfect asymmetric warfare.

bitcoinmoney• 7 years ago

How is nk connected to Internet?

borumpilot• 7 years ago

Quick google found:

Since 2010: North Korean ISP Star JV via China Unicom link.

Since 2017: TransTeleCom, or TTK, is one of Russia’s biggest telecommunications companies and a subsidiary of the Russian railway operator.

https://www.38north.org/2017/10/mwilliams100117/

N. Korea Took in $2B in Cyberattacks to Fund Weapons Program: U.N. Report

Related Stories