Security News > 2020 > September > More Links Found Between North Korean and Russian Hacking Operations

More Links Found Between North Korean and Russian Hacking Operations
2020-09-16 11:33

Security researchers with Intel 471 have identified connections between cyber-activities attributed to North Korean hackers and those of Russian cybercriminals.

In a report published today, Intel 471 says malware that only the North Korean hackers use "Was very likely delivered via network accesses held by Russian-speaking cybercriminals."

Most likely, the researchers note, TrickBot customers are linked to North Korean hackers.

"Based on the above examined links between DPRK threat and TrickBot, we assess it is likely there is a link between the operators or users of TrickBot and DPRK threat actors. TrickBot certainly appears to be a source of compromised accesses that DPRK threat actors can leverage," Intel 471 explains.

Intel 471 believes that, while there might have been some occasional interactions between TA505 and the North Korean hackers, no recent collaboration exists.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/P_njJbUU5MA/more-links-found-between-north-korean-and-russian-hacking-operations