Thursday, March 28, 2024

North Korean hackers attempted theft of millions from Mexican bank

An elite group of North Korean hackers has been identified as responsible for cyberattacks on banks around the world — including Mexico’s state-owned development bank Bancomext — that netted hundreds of millions of dollars, security researchers said yesterday.

A report by United States cybersecurity company FireEye said the mission of the newly-identified group, dubbed APT38, is to raise funds for the North Korean regime headed by Supreme Leader Kim Jong-un.

“They are a cyber-criminal group with the skills of a cyber espionage campaign,” said Sandra Joyce, FireEye’s vice-president of intelligence. “They take their time to learn the intricacies of the organization.”

The attack on Bancomext occurred in early January and attempted to steal around US $110 million but was shut down before the funds were removed.

“Fortunately, the protocol and quick reaction of the area responsible for operation, with the help of banks, corresponding authorities and the Bank of México, contained this incident,” Bancomext said in a statement.

In May, the Bank of México revealed that five financial institutions had been targeted by cyberattacks that resulted in the loss of 300 million pesos (US $ 15.7 million at today’s exchange rate) although it is unclear whether the North Korean group was the source of the attacks.

The FireEye report said that APT38 is one of several hacking cells within a larger umbrella group known as “Lazarus” but that it has unique skills and tools that have allowed it to carry out some of the world’s largest cyber heists.

Joyce said that APT38 takes several months or longer to learn the workings of its targets before it launches an attack.

Once it succeeds in extracting funds, “they deploy destructive malware on their way out” to hide its traces, she added.

Joyce explained that FireEye decided to go public with its investigation because the group appears to be still operating and is “undeterred by any diplomatic efforts.”

APT38 appears to have “the scope and resources of a nation state,” she added.

Nalani Fraser, a member of the FireEye research team, said that APT38 attacks have attempted to steal at least US $1.1 billion since 2014 and have succeeded in siphoning off “hundreds of millions of dollars based on data that we can confirm.”

Source: AFP (sp) 

President López Obrador at a press conference with a model Mexicana airplane

Mexicana airline faces US $840M lawsuit from Texas company

0
The state-owned airline, which launched operations in December, is being sued for breach of contract in a U.S. federal court in New York.
The container ship the Dali crashing into the Francis Scott Key bridge in Baltimore

AMLO confirms 1 Mexican rescued, 2 missing after Baltimore bridge collapse

0
Mexico's President López Obrador confirmed Wednesday morning that the Mexican nationals were working on the bridge when it collapsed Tuesday.
Firefighters in Veracruz

1,000 firefighters combat blazes in Veracruz as wildfires spike nationwide

0
The wildfires in the mountainous central region of the state started on Saturday and have yet to be fully controlled.