Security News > 2022 > July > Why North Korean cybercriminals are targeting businesses with ransomware

Why North Korean cybercriminals are targeting businesses with ransomware.

What happens when a hostile nation-state sponsors that same tactic? A new report by the Microsoft Threat Intelligence Center examines a series of ransomware attacks with ties to North Korea.

Since June of 2021, a cybercriminal group dubbed DEV-0530 by Microsoft but calling itself H0lyGh0st has launched ransomware attacks primarily against small and mid-sized businesses across different countries.

Microsoft also concedes that the North Korean government may not be behind these ransomware incidents, in part because state-sponsored attacks typically target a much wider range of victims beyond those targeted by H0lyGh0st.

Use device discovery to locate unmanaged devices that can be added to Microsoft Defender for Endpoint and protect user identities and credentials using Microsoft Defender for Identity.

Also See Share: Why North Korean cybercriminals are targeting businesses with ransomware.

News URL

https://www.techrepublic.com/article/why-north-korean-targeting-ransomware/