Symantec says 'highly likely' North Korea group behind ransomware attacks

U.N.'s North Korea sanctions monitors hit by 'sustained' cyber attack

An analysis of the recent "WannaCry" ransomware attack has uncovered "strong links" connecting its perpetrators with previous activity attributed to the so-called Lazarus Group, a cybercrime outfit accused of conducting the colossal Sony hack and other high-profile intrusions, according to Symantec, a Silicon Valley-based security company.

American cyber-security firm Symantec said in a new report that tools and infrastructure used in the devastating WannaCry ransomware attack strongly suggest that a hacking group affiliated with North Korea was behind the malware attack that infected over 300,000 computers worldwide.

According to Symantec, the ransomware had numerous hallmarks of other Lazarus attacks, including the 2014 strike on Sony Pictures and a multimillion-dollar theft from the Bangladesh Central Bank.

Researchers at Symantec found multiple instances of code reuse from earlier versions of WannaCry and Lazarus' previous attacks. "(But) we don't think that this is an operation run by a nation-state".

Duzzer, which has previously been linked to Lazarus as well. The attack used two variants of the malware known as Destover, which was used in the Sony Attacks, and one of Volgmer, used in attacks against South Korean targets.

North Korea's Deputy Ambassador to the UN Kim In Ryong, however, dismissed allegations that Pyongyang was involved in the WannaCry cyberattack or the UN hack as "ridiculous".

In the Sony hack, USA government and security companies accused North Korea.

While Lazarus Group is said to have ties to North Korea it's rather hard to pin point where the group operates from and whether it is executing the attacks on behalf of another party.

"The intelligence community will probably take away from this that there is a possibility of splinters in the Lazarus Group, or members who are filling their own pockets", said Thakur.

Analysts have been weighing in with various theories on the identity of those behind WannaCry, and some early evidence had pointed to North Korea.

Cyberattacks backed by governments "are usually impeccable, they don't make rookie mistakes", said Thakur.

Despite the ties to Lazarus, WannaCry attacks doesn't appear to be a case of a nation-state campaign, states Symantec.

Finally, WannaCry and Lazarus-linked Backdoor.Contopee contain shared code.

Other digital crumbs linking the North Korean group to WannaCry include a tool that deletes data that had been used in other Lazarus attacks.

The hacking group widely blamed for breaching Sony Pictures in 2014 was "highly likely" behind the unprecedented WannaCry ransomware attack responsible for crippling computer systems around the world this month, a leading American cybersecurity firm said Monday.

Related news:

Hot News

isis-killer-beheading-video-story-top Eurovision winner arrives home to Portugal
May 23, 2017 - 10:57
Russian Federation is one of Eurovision's heavy hitters, tied with Sweden for the most top-five finishes this century. Portugal also won the first Semi-Final on Tuesday, had the judged vote and the popular vote so the win was absolute.

isis-killer-beheading-video-story-top PM spends 'good time with Trump' in Suadi Summit
May 23, 2017 - 10:56
US president Donald Trump on Sunday acknowledged India as "victim of terrorism" during Arab-Islamic-US Summit at Riyadh . The diplomatic meet between Sharif and Trump did not take place even as the Saudi Arabia was strongly backing the idea.

isis-killer-beheading-video-story-top Dixon robbed at gunpoint hours after winning Indy pole
May 23, 2017 - 10:52
Franchitti is a three-time Indianapolis 500 victor who retired following a massive crash at the 2013 IndyCar race in Houston. The Taco Bell is less than a mile from the Indianapolis Motor Speedway. " You don't expect that to happen, especially here ".

isis-killer-beheading-video-story-top North East is a priority for government, says Prime Minister Narendra Modi
May 23, 2017 - 10:50
He was addressing a gathering in Kutch district after laying the foundation stone for a slew of developmental projects of KPT. During the occasion, the Union ministers will hold media briefings on the Modi government's achievements on May 27 and 28.

isis-killer-beheading-video-story-top Turkey Slams US Over 'Aggressive' Acts Against Bodyguards
May 23, 2017 - 10:47
For all this, it doesn't really appear that the allegedly improved U.S. -Turkey relations under Trump are bearing much fruit. The guards had been filmed hitting and kicking protesters in the area while Erdogan was watching the scene.

Kushners apologize for name-dropping Jared to Chinese investors
May 22, 2017 - 08:29
On Monday, Kushner Companies said Meyer's remarks were not meant to motivate investors to sign onto the real estate project. During the event in Beijing, Kushner's sister promoted a program offering a path to USA citizenship to Chinese backers.

isis-killer-beheading-video-story-top South Korea's Moon warns high chance of clashes with North
May 22, 2017 - 08:26
New South Korean President Moon Jae-in met Matt Pottinger, overseeing Asian affairs at the U.S. Third, dialogue with North Korea is possible when the circumstances are right.

isis-killer-beheading-video-story-top Microsoft's Surface Pro leaked images reveals the design
May 22, 2017 - 08:17
The Microsoft executive further said that the Surface Pro 4's design would be competitive enough for the next few years. Unfortunately, no other information about the new Surface Pro's internal specifications have been leaked yet.

Capitals Overwhelm Penguins 5-2 To Force Game 7
May 22, 2017 - 08:14
If the Capitals get that and it translates to a win, it earns them a winner-take-call Game 7 back in Washington on Wednesday. In the five games prior, Pittsburgh displayed a vexing habit of clogging up the space in front of the net and blocking shots.

isis-killer-beheading-video-story-top Storms increase into the weekend
May 22, 2017 - 08:07
The storms have a history of staying just below severe limits but they still can produce some gusty winds and localized flooding. With those storms developing in the early morning hours on Monday , we are expecting the rain to stick around for some time.

isis-killer-beheading-video-story-top Aussie coach sees highs and lows in sevens campaign
May 22, 2017 - 08:06
Douglas and Hirayama scored tries in the New Zealand loss, which put Canada into a must-win situation against Japan. Richard de Carpentier had a try disallowed because he put a hand in touch, but England went into halftime 7-0 up.

MLB Predictions: Can the Tigers stop the Rangers' win streak? 5/20/17
May 22, 2017 - 08:03
In Atlanta, Nick Markakis hit a go-ahead single off Enny Romero (2-2) in the eighth inning and Kurt Suzuki added a two-run homer. Nick Martinez lasted just five innings for the Rangers, but he didn't allow an earned run and allowed Texas to get the lead.

isis-killer-beheading-video-story-top Paul George focused on legacy, improving Lakers
May 21, 2017 - 07:23
The Pacers could still offer an extension to George this summer, but he doesn't have as much financial incentive to sign one. Klay Thompson made All-NBA last year but not this year, so he would have to do it again next year to qualify.

isis-killer-beheading-video-story-top Woman paralyzed, four others hospitalized after eating gas station nacho cheese
May 20, 2017 - 05:05
Authorities have confirmed five other cases of botulism linked to the gas station and continue to investigate four other cases. They're handling that stuff every day. "The source of the food product may be unrelated to the gas station", he added.

isis-killer-beheading-video-story-top Man United held by Southampton in 0-0 stalemate
May 20, 2017 - 04:58
There will be some changes to the team but my team want to play at Old Trafford, they don't want me to leave them out. Southampton struggled to relieve the pressure building on manager Claude Puel against an under-strength United.