Government agencies from the United States and the Republic of Korea are highlighting new ransomware tactics they’ve seen, which they say are used to conceal the affiliation of Democratic People’s Republic of Korea hackers working to stage attacks against U.S. and South Korean healthcare organizations and critical infrastructure.WHY IT MATTERS
The new cybersecurity advisory, Ransomware attacks on critical infrastructure fund DPRK malicious cyber activities, details both North Korea’s historically and recently observed tactics, techniques and procedures and indicators of compromise.
The additional observed TTPs “span phases from acquiring and purchasing infrastructure to concealing DPRK affiliation,” according to the United States National Security Agency, the Federal…
Continue Reading