Wednesday, June 12, 2024

North Korean hackers attempted theft of millions from Mexican bank

An elite group of North Korean hackers has been identified as responsible for cyberattacks on banks around the world — including Mexico’s state-owned development bank Bancomext — that netted hundreds of millions of dollars, security researchers said yesterday.

A report by United States cybersecurity company FireEye said the mission of the newly-identified group, dubbed APT38, is to raise funds for the North Korean regime headed by Supreme Leader Kim Jong-un.

“They are a cyber-criminal group with the skills of a cyber espionage campaign,” said Sandra Joyce, FireEye’s vice-president of intelligence. “They take their time to learn the intricacies of the organization.”

The attack on Bancomext occurred in early January and attempted to steal around US $110 million but was shut down before the funds were removed.

“Fortunately, the protocol and quick reaction of the area responsible for operation, with the help of banks, corresponding authorities and the Bank of México, contained this incident,” Bancomext said in a statement.

In May, the Bank of México revealed that five financial institutions had been targeted by cyberattacks that resulted in the loss of 300 million pesos (US $ 15.7 million at today’s exchange rate) although it is unclear whether the North Korean group was the source of the attacks.

The FireEye report said that APT38 is one of several hacking cells within a larger umbrella group known as “Lazarus” but that it has unique skills and tools that have allowed it to carry out some of the world’s largest cyber heists.

Joyce said that APT38 takes several months or longer to learn the workings of its targets before it launches an attack.

Once it succeeds in extracting funds, “they deploy destructive malware on their way out” to hide its traces, she added.

Joyce explained that FireEye decided to go public with its investigation because the group appears to be still operating and is “undeterred by any diplomatic efforts.”

APT38 appears to have “the scope and resources of a nation state,” she added.

Nalani Fraser, a member of the FireEye research team, said that APT38 attacks have attempted to steal at least US $1.1 billion since 2014 and have succeeded in siphoning off “hundreds of millions of dollars based on data that we can confirm.”

Source: AFP (sp) 

Have something to say? Paid Subscribers get all access to make & read comments.
Refugees displaced by an armed attack on their Chiapas town stand in the bleachers of a open air sports court and look at proceedings below through a protective wire fence

Over 4,000 residents flee Chiapas town following armed attack

Thousands in the Chiapas town who fled a June 4 armed attack by a criminal group refuse to go home until authorities can ensure their safety.
An endangered vaquita swimming in the ocean

May vaquita porpoise survey finds fewer specimens than in 2023

The survey, which takes place annually in Mexico’s Upper Gulf of California, recorded the lowest-ever number of individual vaquitas.
Man in uniform and hard hat spraying auditorium seats for mosquitos, surrounded by pesticide fumes.

Study shows dengue cases in Mexico primed for widespread expansion

As dengue cases in Mexico continue to rise in 2024, a new study predicts that the mosquito-borne virus will affect 81% of Mexico by 2039.