Friday, July 18, 2025

North Korean hackers attempted theft of millions from Mexican bank

An elite group of North Korean hackers has been identified as responsible for cyberattacks on banks around the world — including Mexico’s state-owned development bank Bancomext — that netted hundreds of millions of dollars, security researchers said yesterday.

A report by United States cybersecurity company FireEye said the mission of the newly-identified group, dubbed APT38, is to raise funds for the North Korean regime headed by Supreme Leader Kim Jong-un.

“They are a cyber-criminal group with the skills of a cyber espionage campaign,” said Sandra Joyce, FireEye’s vice-president of intelligence. “They take their time to learn the intricacies of the organization.”

The attack on Bancomext occurred in early January and attempted to steal around US $110 million but was shut down before the funds were removed.

“Fortunately, the protocol and quick reaction of the area responsible for operation, with the help of banks, corresponding authorities and the Bank of México, contained this incident,” Bancomext said in a statement.

In May, the Bank of México revealed that five financial institutions had been targeted by cyberattacks that resulted in the loss of 300 million pesos (US $ 15.7 million at today’s exchange rate) although it is unclear whether the North Korean group was the source of the attacks.

The FireEye report said that APT38 is one of several hacking cells within a larger umbrella group known as “Lazarus” but that it has unique skills and tools that have allowed it to carry out some of the world’s largest cyber heists.

Joyce said that APT38 takes several months or longer to learn the workings of its targets before it launches an attack.

Once it succeeds in extracting funds, “they deploy destructive malware on their way out” to hide its traces, she added.

Joyce explained that FireEye decided to go public with its investigation because the group appears to be still operating and is “undeterred by any diplomatic efforts.”

APT38 appears to have “the scope and resources of a nation state,” she added.

Nalani Fraser, a member of the FireEye research team, said that APT38 attacks have attempted to steal at least US $1.1 billion since 2014 and have succeeded in siphoning off “hundreds of millions of dollars based on data that we can confirm.”

Source: AFP (sp) 

Have something to say? Paid Subscribers get all access to make & read comments.
A man stands by an open suitcase in an airport revision area

Foreign national caught with over a million pesos of ketamine in Cancún airport

0
Officials confiscated 2 kilograms of ketamine, a controlled substance in Mexico.
two people walkin gby a for rent sign

Can rent control stop gentrification? Mexico City officials plan to find out

9
Political leaders in the nation's capital have reached into their anti-gentrification toolkit and come up with an approach that goes straight to the heart of the problem.
cell phone with Uber

Mexican authorities slam Uber’s price hike: ‘Unilateral and irresponsible’

2
The ride-hailing app insists that the rise is necessary after recent labor reforms gave its drivers full employee rights, including IMSS membership.
BETA Version - Powered by Perplexity