North Korean man indicted over major hacking and cyber security crimes

[Big Nasty Edison]

Park Jin Hyok was indicted for the Sony hack from a few years ago and an attack on a Bangladeshi bank.

https://www.npr.org/2018/09/06/6452...yber-operative-in-sony-hack-ransomware-attack

The Justice Department announced charges Thursday against a North Korean man in connection with a series of infamous cyberattacks, including the 2014 hack of Sony Pictures Entertainment and the WannaCry ransomware that paralyzed computers across the globe.

"Park Jin Hyok was part of a hacking group that conducted some of the most destructive recent online attacks in the world, according to a criminal complaint unsealed Thursday.

The malicious activities attributed to Park and his group include the cybertheft of $81 million from the Bangladesh Bank."

 

[sub_thug]

He won't stand trial. As the article says, we have indicted members of the Chinese military, Iranians, and Russians, none of whom have ever seen the inside of a court room. Governments have a long history of not extraditing their own citizens for stuff like this.

 

[Big Nasty Edison]

He won't stand trial. As the article says, we have indicted members of the Chinese military, Iranians, and Russians, none of whom have ever seen the inside of a court room. Governments have a long history of not extraditing their own citizens for stuff like this.

Would be interesting to see if this becomes part of any discussions with North Korea and denuclearization.

 

[syct23]

#KimToo

 

[sub_thug]

Would be interesting to see if this becomes part of any discussions with North Korea and denuclearization.

Yeah, it would. On one hand, giving us that guy is a show of good faith, and he'll spend the rest of his life in an American prison. So yay there. On the other, that sets a whole new precedent in the world where nation-states extradite their own citizens who are guilty of cybercrimes in other countries. If an American hacks a Russian entity, perhaps on behalf of the US government, would you be cool with that individual spending their life in a Russian prison or being executed by the Russian government? It begs some serious questions.

 

[Big Nasty Edison]

Yeah, it would. On one hand, giving us that guy is a show of good faith, and he'll spend the rest of his life in an American prison. So yay there. On the other, that sets a whole new precedent in the world where nation-states extradite their own citizens who are guilty of cybercrimes in other countries. If an American hacks a Russian entity, perhaps on behalf of the US government, would you be cool with that individual spending their life in a Russian prison or being executed by the Russian government? It begs some serious questions.

I fully agree.

 

[GSP_37]

How were they able to ID him in particular?

 

[sub_thug]

How were they able to ID him in particular?

Probably followed digital transactions back to the location he worked from, hacked them back, and checked out their logs. The other way to do it is threat intelligence, following the patterns in the code back to the group you think it's from (we suspected NK right away), analyzed where it could have come from within the country, accessed their systems, and looked around for who did it. Essentially a hack-back. The NSA publicly is willing to pay a few grand to anyone who offers them 0-day exploits on modern systems. The IC has backdoors into virtually everything if they want it. You think you're not being watched?

 

[all caps]

Imagine your country selling you out to be murdered by another country <Lmaoo>

 

[GSP_37]

Imagine your country selling you out to be murdered by another country <Lmaoo>

Didn't Chump agree to sending US citizens to Russia for "questioning"?

 

[all caps]

Didn't Chump agree to sending US citizens to Russia for "questioning"?

That's different though

 

[GSP_37]

That's different though

Different like "Lock her up!" vs. let Flynn off the hook? Or "Lock her up!" vs. great job Jeff for charging two Republicans before the election?

 

[all caps]

Different like "Lock her up!" vs. let Flynn off the hook? Or "Lock her up!" vs. great job Jeff for charging two Republicans before the election?

This was for national security reasons. Also, to protect our freedoms, etc. They hate us for our freedoms.

 

[bobgeese]

I sentence you to live in that shithole, NK.

 

[bad seed]

Probably followed digital transactions back to the location he worked from, hacked them back, and checked out their logs. The other way to do it is threat intelligence, following the patterns in the code back to the group you think it's from (we suspected NK right away), analyzed where it could have come from within the country, accessed their systems, and looked around for who did it. Essentially a hack-back. The NSA publicly is willing to pay a few grand to anyone who offers them 0-day exploits on modern systems. The IC has backdoors into virtually everything if they want it. You think you're not being watched?

do you work in cybersecurity?

 

[sub_thug]

do you work in cybersecurity?

Yes, in a part time capacity. I do some independent contracting on the side doing penetration testing (also known as ethical hacking) and some incident response work. Full time job is in the army.