Wednesday, July 2, 2025

North Korean hackers attempted theft of millions from Mexican bank

An elite group of North Korean hackers has been identified as responsible for cyberattacks on banks around the world — including Mexico’s state-owned development bank Bancomext — that netted hundreds of millions of dollars, security researchers said yesterday.

A report by United States cybersecurity company FireEye said the mission of the newly-identified group, dubbed APT38, is to raise funds for the North Korean regime headed by Supreme Leader Kim Jong-un.

“They are a cyber-criminal group with the skills of a cyber espionage campaign,” said Sandra Joyce, FireEye’s vice-president of intelligence. “They take their time to learn the intricacies of the organization.”

The attack on Bancomext occurred in early January and attempted to steal around US $110 million but was shut down before the funds were removed.

“Fortunately, the protocol and quick reaction of the area responsible for operation, with the help of banks, corresponding authorities and the Bank of México, contained this incident,” Bancomext said in a statement.

In May, the Bank of México revealed that five financial institutions had been targeted by cyberattacks that resulted in the loss of 300 million pesos (US $ 15.7 million at today’s exchange rate) although it is unclear whether the North Korean group was the source of the attacks.

The FireEye report said that APT38 is one of several hacking cells within a larger umbrella group known as “Lazarus” but that it has unique skills and tools that have allowed it to carry out some of the world’s largest cyber heists.

Joyce said that APT38 takes several months or longer to learn the workings of its targets before it launches an attack.

Once it succeeds in extracting funds, “they deploy destructive malware on their way out” to hide its traces, she added.

Joyce explained that FireEye decided to go public with its investigation because the group appears to be still operating and is “undeterred by any diplomatic efforts.”

APT38 appears to have “the scope and resources of a nation state,” she added.

Nalani Fraser, a member of the FireEye research team, said that APT38 attacks have attempted to steal at least US $1.1 billion since 2014 and have succeeded in siphoning off “hundreds of millions of dollars based on data that we can confirm.”

Source: AFP (sp) 

Have something to say? Paid Subscribers get all access to make & read comments.
people releasing fish in shallow water

Environment Ministry releases 40,000 baby totoaba into the Gulf of California

0
The Environment Ministry, working with the private sector and civil society, has been conducting a repopulation project that included the recent release of 40,000 hatchlings.
crematorium in Ciudad Juárez

2 arrests made after 383 bodies found piled up at Ciudad Juárez crematorium

0
The crematorium, which had the permits to operate, was housing corpses for as long as five years and reportedly gave relatives of the deceased "other material" in place of ashes.
a person registering their fingerprints

Senate grants Security Ministry broad data access powers, sparking ‘police state’ fears

5
The federal government argues that the National Investigation and Intelligence System Law, popularly referred to as the "Spy Law," is required to bolster the state's capacity to combat organized crime.