Connect with us

World News

Cybersecurity Experts see Possible North Korea Links to Global Ransomware Attack

Published

on

In the attack, hackers demand payment from victims in bitcoins to regain access to their encrypted computers.

SEOUL – Cybersecurity experts are pointing to circumstantial evidence that North Korea may be behind the global “ransomware” attack: the way the hackers took hostage computers and servers across the world was similar to previous cyberattacks attributed to North Korea.

Simon Choi, a director at South Korean anti-virus software company Hauri Inc. who has analyzed North Korean malware since 2008 and advises the government, said Tuesday that the North is no newcomer to the world of bitcoins. It has been mining the digital currency using malicious computer programs since as early as 2013, he said.

In the attack, hackers demand payment from victims in bitcoins to regain access to their encrypted computers. The malware has scrambled data at hospitals, factories, government agencies, banks and other businesses since Friday, but an expected second-wave outbreak largely failed to materialize after the weekend, in part because security researchers had already defanged it .

Choi is one of a number of researchers around the world who have suggested a possible link between the “ransomware” known as WannaCry and hackers linked to North Korea. Researchers at Symantec and Kaspersky Lab have found similarities between WannaCry and previous attacks blamed on North Korea.

While Choi’s speculation may deepen suspicions that the nuclear-armed state is responsible, the evidence is still far from conclusive. Authorities are working to catch the extortionists behind the global cyberattack, searching for digital clues and following the money.

“We are talking about a possibility, not that this was done by North Korea,” Choi said.

ABOUT THAT NORTH KOREA LINK

WannaCry paralyzed computers running mostly older versions of Microsoft Windows in some 150 countries. It encrypted users’ computer files and displayed a message demanding $300 to $600 worth of the digital currency bitcoin to release them; failure to pay would leave the data scrambled and likely beyond repair .

The hackers appeared to have taken control of computers and servers around the world by sending a type of malicious code known as a worm to file-sharing protocols. The worms quickly scanned computers with vulnerability, in this case the older versions of Microsoft Windows, and used those computers as hackers’ command and control centers.

This method, which allows quick and massive infections of computers with security weaknesses, has been found in previously known North Korean cyberattacks, including the Sony hack in 2014 blamed on North Korea.

“Since a July 2009 cyberattack by North Korea, they used the same method,” Choi said. “It’s not unique in North Korea but it’s also not a very common method.”

Choi also cited an accidental communication he had last year with a hacker traced to a North Korean internet address who admitted development of ransomware.

South Korea was mostly spared from the latest ransomware attack, partly because constant threats from the North have made the government and companies careful about always updating their software.

South Korea has been a frequent target of cyberattacks that it traced to its northern neighbor. Some high-profile attacks between 2009 and 2013 shut down government websites, banking systems and paralyzed broadcasters.

On Monday, the Russian security firm Kaspersky Lab said portions of the WannaCry program use the same code as malware previously distributed by the Lazarus Group, a hacker collective behind the 2014 Sony hack.

But it’s possible the code was simply copied from the Lazarus malware without any other direct connection. Kaspersky said “further research can be crucial to connecting the dots.”

Another security company, Symantec, has also found similarities between WannaCry and Lazarus tools, and said it’s “continuing to investigate for stronger connections.”

If North Korea, believed to be training cyber warriors at schools, is indeed responsible for the latest attack, Choi said the world should stop underestimating its capabilities and work together to think of a new way to respond to cyber threats, such as having China pull the plug on North Korea’s internet.

“We have underestimated North Korea so far that since North Korea is poor, it wouldn’t have any technologies. But North Korea has been preparing cyber skills for more than 10 years and its skill is significant. We should never underestimate it,” Choi said.

FOLLOW THE MONEY

Researchers might find some additional clues in the bitcoin accounts accepting the ransom payments. There have been three accounts identified so far, and there’s no indication yet that the criminals have touched the funds.

Although bitcoin is anonymized, researchers can watch it flow from user to user. So investigators can follow the transactions until an anonymous account matches with a real person, said Steve Grobman, chief technology officer with the California security company McAfee.

But that technique is no sure bet. There are ways to convert bitcoins into cash on the sly through third parties. And even finding a real person might be no help if they’re in a jurisdiction that won’t cooperate.

TELL-TALE SIGNS

James Lewis, a cybersecurity expert at the Center for Strategic and International Studies in Washington, said U.S. investigators are collecting forensic information – such as internet addresses, samples of malware or information the culprits might have inadvertently left on computers – that could be matched with the handiwork of known hackers.

Investigators might also be able to extract some information about the attacker from a previously hidden internet address connected to WannaCry’s “kill switch.” That switch was essentially a beacon sending the message “hey, I’m infected” to the hidden address, Weaver said.

That means the very first attempts to reach that address, which might have been recorded by spy agencies such as the NSA or Russian intelligence, could lead to “patient zero” – the first computer infected with WannaCry. That, in turn, might further narrow the focus on possible suspects.

THE PLAYERS

Forensics, though, will only get investigators so far. One challenge will be sharing intelligence in real time to move as quickly as the criminals – a tricky feat when some of the major nations involved, such as the U.S. and Russia, distrust each other.

Even if the perpetrators can be identified, bringing them to justice could be another matter. They might be hiding out in countries that wouldn’t be willing to extradite suspects for prosecution, said Robert Cattanach, a former U.S. Justice Department attorney and an expert on cybersecurity.

On the other hand, the WannaCry attack hit – and annoyed – many countries. Russia was among the hardest hit, and Britain among the most high-profile, and both have “some pretty good investigative capabilities,” Cattanach said.

 

The Associated Press

Anick Jesdanun and Barbary Ortutay in New York, Lori Hinnant in Paris and Deb Riechmann in Washington contributed to this story.

Continue Reading

World News

Marine Le Pen’s National Rally Wins the First Round in France 2024 Election

Published

on

Marine Le Pen's far-right National Rally (RN) party scored historic gains in France

Exit polls in France showed that Marine Le Pen’s right-wing National Rally (RN) party made huge gains to win the first round of election on Sunday. However, the final outcome will depend on how people trade votes in the days before next week’s run-off.

Exit polls from Ipsos, Ifop, OpinionWay, and Elabe showed that the RN got about 34% of the vote. This was a big loss for President Emmanuel Macron, who called the early election after his party lost badly in the European Parliament elections earlier this month.

The National Rally (RN) easily won more votes than its opponents on the left and center, including Macron’s Together group, whose bloc was predicted to get 20.5% to 23% of the vote. Exit polls showed that the New Popular Front (NFP), a hastily put together left-wing alliance, would get about 29% of the vote.

The results of the exit polls matched what people said in polls before the election, which made Le Pen’s fans very happy. But they didn’t say for sure if the anti-immigrant, anti-EU National Rally (RN) will be able to “cohabit” with the pro-EU Macron in a government after the runoff election next Sunday.

Voters in France Angry at Macron

Many French people have looked down on the National Rally (RN) for a long time, but now it is closer to power than it has ever been. A party known for racism and antisemitism has tried to clean up its image, and it has worked. Voters are angry at Macron, the high cost of living, and rising concerns about immigration.

Fans of Marine Le Pen waved French flags and sang the Marseillaise in the northern French district of Henin-Beaumont. The crowd cheered as Le Pen said, “The French have shown they are ready to turn the page on a power that is disrespectful and destructive.”

The National Rally’s chances of taking power next week will rest on what political deals its opponents make in the next few days. Right-wing and left-wing parties used to work together to keep the National Rally (RN) out of power, but the “republican front,” which refers to this group, is less stable than ever.

If no candidate gets 50% of the vote in the first round, the top two candidates and anyone else with 12.5% of the registered voters immediately move on to the second round. The district goes to the person who gets the most votes in the runoff.

France is likely to have a record number of three-way runoffs because so many people voted on Sunday. Experts say that these are much better for the National Rally (RN) than two-way games. Almost right away on Sunday night, the horse trade began.

Macron asked people to support candidates who are “clearly republican and democratic.” Based on what he has said recently, this would rule out candidates from the National Rally (RN) and the hard-left France Unbowed (LFI) party. Leaders on the far left and the center left both asked their third-placed candidates to drop out.

Minority government

Jean-Luc Melenchon, leader of France Unbowed, said, “Our rule is simple and clear: not a single more vote for the National Rally.” But the center-right Republicans party, which split before the vote when some of its members joined the RN, didn’t say anything.

The president of the RN party, Jordan Bardella, who is 28 years old, said he was ready to be prime minister if his party gets a majority of seats. He has said he won’t try to make a minority government, and neither Macron nor the communist NFP will work with him.

“I will be a “cohabitation” Prime Minister, respectful of the constitution and of the office of President of the Republic, but uncompromising about the policies we will implement,” he said.

A few thousand anti-RN protesters met in Paris’s Republique square on Sunday night for a rally of the leftist alliance. The mood was gloomy.

Niya Khaldi, a 33-year-old teacher, said that the RN’s good results made her feel “disgust, sadness, and fear.”

“This is not how I normally act,” she said. “I think I came to reassure myself, to not feel alone.”

Election Runoff

The result on Sunday didn’t have much of an effect on the market. In early Asia-Pacific trade, the euro gained about 0.23%. Fiona Cincotta, a senior markets expert at City Index in London, said she was glad the outcome “didn’t come as a surprise.”

“Le Pen had a slightly smaller margin than some of the polls had pointed to, which may have helped the euro a little bit higher on the open,” she noted. “Now everyone is waiting for July 7 to see if the second round supports a clear majority or not. So it does feel like we’re on the edge of something.”

Some pollsters thought the RN would win the most seats in the National Assembly, but Elabe was the only one who thought the party would win all 289 seats in the run-off. Seat projections made after the first round of voting are often very wrong, and this race is no exception.

On Sunday night, Reuters reported there were no final results for the whole country yet, but they were due in the next few hours. In France, exit polls have usually been very accurate.

Voter turnout was high compared to previous parliamentary elections. This shows how passionate people are about politics after Macron made the shocking and politically risky decision to call a vote in parliament.

Mathieu Gallard, research head at Ipsos France, said that at 1500 GMT, nearly 60% of voters had turned out, up from 39.42% two years earlier. This was the highest comparable turnout since the 1986 legislative vote. It wasn’t clear when the official number of people who voted would be changed.

 

Continue Reading

World News

Pakistan Seeks US Support for Counter-Terrorism Operation Azm-e-Istehkam

Published

on

Pakistan

(CTN News) – Pakistan’s Ambassador to the United States, Masood Khan, has urged Washington to provide Pakistan with sophisticated small arms and communication equipment to ensure the success of Operation Azm-e-Istehkam, a newly approved counter-terrorism initiative in the country.

The federal government recently approved the reinvigorated national counter-terrorism drive, which comprises three components: doctrinal, societal, and operational.

Ambassador Khan noted that work on the first two phases has already begun, with the third phase set to be implemented soon.

Addressing US policymakers, scholars, and corporate leaders at the Wilson Center in Washington, Khan emphasized the importance of strong security links, enhanced intelligence cooperation, and the resumption of sales of advanced military platforms between Pakistan and the US.

He argued that this is crucial for regional security and countering the rising tide of terrorism, which also threatens the interests of the US and its allies.

“Pakistan has launched Azm-i-Istehkam […] to oppose and dismantle terrorist networks. For that, we need sophisticated small arms and communication equipment,” said Ambassador Khan.

Pakistan–United States relations

The ambassador observed that the prospects of Pakistan-United States relations were bright, stating that the two countries “share values, our security and economic interests are interwoven, and it is the aspiration of our two peoples that strengthens our ties.”

He invited US investors and businesses to explore Pakistan’s potential in terms of demographic dividend, technological advancements, and market opportunities.

Khan also suggested that the US should consider Pakistan as a partner in its diplomatic efforts in Kabul and collaborate on counterterrorism and the rights of women and girls in Afghanistan.

He stressed that the bilateral relationship should be based on ground realities and not be hindered by a few issues.

“We should not base our engagement on the incongruity of expectations.

Our ties should be anchored in ground realities, even as we aim for stronger security and economic partnerships. Secondly, one or two issues should not hold the entire relationship hostage,” said the ambassador.

Continue Reading

World News

China Urges Taiwanese to Visit Mainland ‘Without Worry’ Despite Execution Threat

Published

on

China Urges Taiwanese to Visit Mainland Without Worry Despite Threats

China has reassured Taiwanese citizens that they can visit the mainland “without the slightest worry”, despite Taiwan raising its travel alert to the second-highest level in response to Beijing’s new judicial guidelines targeting supporters of Taiwanese independence.

Last week, China published guidelines that could impose the death penalty for “particularly serious” cases involving “diehard” advocates of Taiwanese independence.

In response, Taiwan’s government urged the public to avoid “unnecessary travel” to mainland China and Hong Kong, and raised its travel warning to the “orange” level.

However, Zhu Fenglian, a spokeswoman for a Chinese body overseeing Taiwan affairs, stated that the new directives are “aimed solely at the very small number of supporters of ‘Taiwan independence’, who are engaged in malicious acts and utterances”.

She emphasized that “the vast majority of Taiwan compatriots involved in cross-strait exchanges and cooperation do not need to have the slightest worry when they come to or leave mainland China”.

“They can arrive in high spirits and leave fully satisfied with their stay,” Zhu added.

What’s Behind The China-Taiwan Tensions?

The tensions stem from the longstanding dispute over Taiwan’s status. Mainland China claims Taiwan as part of its territory and has refused to rule out using force to bring the democratic island under its control, while Taiwan sees itself as a sovereign state.

Beijing has not conducted top-level communications with Taipei since 2016, when the Democratic Progressive Party’s Tsai Ing-wen became Taiwan’s leader. China has since branded her successor, President Lai Ching-te, a “dangerous separatist”.

“The DPP authorities have fabricated excuses to deceive the people on the island and incite confrontation and opposition,” Zhu said in her statement.
Despite the political tensions, many Taiwanese continue to travel to mainland China for work, study, or business.

Continue Reading

Trending