North Korean Hackers Infiltrate Chile's ATM Network After Skype Job Interview (zdnet.com) 44
A Skype call and a gullible employee was all it took for North Korean hackers to infiltrate the computer network of Redbanc, the company that interconnects the ATM infrastructure of all Chilean banks. From a report: Prime suspects behind the hack are a hacker group known as Lazarus Group (or Hidden Cobra), known to have associations to the Pyongyang regime, is one of the most active and dangerous hacking groups around, and known to have targeted banks, financial institutions, and cryptocurrency exchanges in the past years. Lazarus' most recent attack took place at the end of December last year but only came to the public's attention after Chilean Senator Felipe Harboe called out Redbanc on Twitter last week for not disclosing its security breach. The company, which has direct lines into the networks of all Chilean banks, formally admitted to the hack a day later in a message posted on its website, but that announcement didn't include any details about the intrusion. However, a day after Redbanc's admission, an investigation conducted by Chilean tech news site trendTIC revealed that the financial firm was the victim of a serious cyber-attack, and not something that could be easily dismissed. According to reporters, the source of the hack was identified as a LinkedIn ad for a developer position at another company to which one of the Redbanc employees applied.
For the Record (Score:5, Funny)
Just for the record, I had nothing to do with this.
Re:For the Record (Score:5, Funny)
4-digit UID = international cybercriminal, no exceptions.
Re: (Score:3)
For the Record (Score:2, Interesting)
It's not "after a skype interview", but rather "after the user opened a malicious executable which compromised the system". How is this newsworthy again?
Re: (Score:2)
It's not "after a skype interview", but rather "after the user opened a malicious executable which compromised the system". How is this newsworthy again?
Clickbait for Nerds.
North Korea - Improving The World, Every Day!!! (Score:2)
Misleading title... (Score:5, Informative)
Re: (Score:3)
You're not getting it. It's easy to play the "idiots get what they deserve". In practice, someone looking to get a job at a company will lower its guards since he need that job and refusing to follow a stupid company process will likely disqualify them.
And even when interviewing for very "technical" companies, HR folks usually have no clue about security and will put the candidates at risk all the times, so even if you're a security expert, it's really hard to know whether the interviewer is trying to tric
they ask for your SS# as part of the application (Score:2)
they ask for your SS# as part of the application and that in it self it is bad.
Re: (Score:1)
In Chile the RUT (Unique Identification Number) is not secret. There are third party web sites that find a RUT given your name, and those are not illegal.
Re: (Score:2)
Re: (Score:2)
The title makes it seem as if Skype was the infection vector, but reading the article will tell you it wasn't. The problem, as usual, is stupid people doing stupid things, "during this interview [the Skype call], the Redbanc employee was asked to download, install, and run a file named ApplicationPDF.exe, a program that would help with the recruitment process and generate a standard application form." Yes, Skype is a mess, but it didn't infect the computer system.
I think that's even less interesting than what I had imagined, which was the Redbanc employee leaving screen sharing turned on and allowing the other person to see something like login credentials that they could use to gain access.
Re: (Score:2)
Its the junk US consumer OS that allows NK in.
Doing interviews with random strangers?
Ensure the interview system is fully isolated and used only for that interview.
Malicious attribution (Score:1)
North Korea has nothing to gain by doing flippant things like this at this point in time when they're trying to reconcile with the world. This is just malicious attribution most likely carried out by the U.S. to continue throwing wrenches into the work as always.
Also, what could they possibly gain by doing this? Plop out money at some cash dispenser and then send an agent to collect the "booty" and bring it back home? As usual, a "report" with no sense to it.
Re:Malicious attribution (Score:4, Interesting)
North Korea has nothing to gain by doing flippant things like this
Actually, they do gain. If NK behaved like a "normal" country, they would be treated like one. But by regularly engaging in batshit insane behavior, they lower expectations so much that when we sit down to negotiate with them, we are happy to accept any outcome that is even halfway sane, even they though have a long pattern of not keeping their word.
The Kim family regime has controlled NK for more than 70 years. Even longer than the Castro family has controlled Cuba. Their strategy of egregious behavior has worked well for them.
This was posted too close to lunch. (Score:4, Funny)
I read the title, and I was thinking of Chilie's Bar and Grill, (a somewhat popular food chain in the US). I was picturing some early 20 something store manager, just getting tricked by this guy. Then I read a little further realize it was the country.
Re: (Score:2, Offtopic)
I read the title, and I was thinking of Chilie's Bar and Grill
Here is a quick guide:
Chile: The country
Chili: The name of the bar & grill
Chilie: (What your wrote) Not an actual word
Re: (Score:1)
This is Chili's Grill & Bar, an American restaurant chain.
This is Chile, a beautiful country located in South America. Have you ever heard of the writer Isabel Allende? She comes from Chile!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
Get real (Score:2)
I was going to say... (Score:2)
EggShell (Score:3)
It was "EggShell" security, a hard perimiter with no protection once it cracks. Any breach and -everything- is lost.
I am not sure that it counts as any security at all, these days...
MICROS~1 Windows strikes again :] (Score:2)