All is not so copacetic with North Korea. The United States has many channels of intelligence regarding North Korea and dealing with Kim Jong-Un…
All is not so copacetic with North Korea. The United States has many channels of intelligence regarding North Korea and dealing with Kim Jong-Un. Many of the moving parts require diplomatic artistry.
Below are but two examples and the prediction of a second summit between the United States and North Korea being noted, the logistics is a chess game.
FireEye has released a report stating the tools and techniques used by the group, “ We believe APT38’s financial motivation, unique toolset, and tactics, techniques, and procedures (TTPs) observed during their carefully executed operations are distinct enough to be tracked separately from other North Korean cyber activity. There are many overlapping characteristics with other operations, known as “Lazarus” and the actor we call TEMP. Hermit; however, we believe separating this group will provide defenders with a more focused understanding of the adversary and allow them to prioritize resources and enable defense. ”
In their official blog, the company further explained the distinction of the group from any other hackers out there. Foremost, the malware tools used overlap or are similar indicating the similar development behind the scenes.
The general pattern used by APT38 was observed to be this way:
First, the information is gathered by targeting third-party vendors to understand the mechanics of their transactions.
Then, initial compromise takes place followed by internal reconnaissance, then pivot to victim servers used for swift transactions.
After this, finally, the funds are transferred or stolen.
This group does not stop there. They remove all the evidence that might help the authorities trace back to them or know the exact way or methodology of the fraud.
