{"id":1281,"date":"2018-02-06T15:44:47","date_gmt":"2018-02-06T19:44:47","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=1281"},"modified":"2022-07-14T10:01:12","modified_gmt":"2022-07-14T14:01:12","slug":"3-ways-north-korean-digital-crimewave-affects-enterprise","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/","title":{"rendered":"3 Ways the North Korean Digital Crimewave Affects Your Enterprise"},"content":{"rendered":"

\"north<\/p>\n

Just last month, the world was rocked by one of the largest cryptocurrency heists in history. Coincheck, Japan\u2019s largest cryptocurrency exchange, reported that hackers stole the digital equivalent of $530 million. Even previously massive cryptocurrency thefts, like the one at <\/span>NiceHash in December<\/span><\/a>, pale in comparison to this one. \u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Adding a new and concerning layer to this crime, South Korean intelligence agencies <\/span>stated<\/span><\/a> that there is a possibility the theft was conducted at the behest of North Korea\u2019s authoritarian regime. Although at time of writing no direct evidence has linked the pariah state to the attack, the South Korean suspicions are perhaps not unfounded. They are certainly not exclusive; the U.S. government publicly accused North Korea of being behind the WannaCry ransomware epidemic that affected 150 countries last year. Endpoint security vendor FireEye <\/span>connected<\/span><\/a> North Korea to three separate bitcoin heists in South Korea in 2017 alone. \u00a0\u00a0<\/span><\/p>\n

Why should any of this concern your enterprise? Because this accusation carries with it the implication that North Korea\u2019s hacking efforts are continuing to increase in both ambition and success. It suggests that hackers working on behalf of nation-states, about whom cybersecurity analysts have <\/span>expressed grave concerns<\/span><\/a>, are more than a black market service; instead, they will be a fundamental part of future intelligence and military outfits. Without proper preparation, every enterprise is at risk from this evolving species of threat actor. \u00a0<\/span><\/p>\n

Here\u2019s 3 things to keep in mind about the North Korean hacking crimewave: <\/span><\/p>\n

Nation-State Hackers Will Not Just Target Other Nation-States<\/b><\/h3>\n

North Korea\u2019s digital criminals are really more of a division of its armed forces. The country has a dedicated corps of 6,000 hackers trained in specially designed military schools, with their own chains of command via a government oversight bureau. <\/span><\/p>\n

But this is not an army mobilized to fight against another army in the digital battle field. This is an army recruited in part to obtain funds for the heavily-sanctioned state, whose economy is extremely brittle. That they therefore target cryptocurrency exchanges makes sense, as they are largely unregulated, anonymous, and can be converted to hard currency on a whim. <\/span><\/p>\n

However, North Korea\u2019s digital interests are far from singularly financial; some attacks are intended only to cause chaos. The WannaCry ransomware didn\u2019t turn a profit but brought the British National Health Services to their knees for a brief moment. In 2014 hackers leaked documents from Sony Pictures Entertainment to disrupt the release of <\/span>The Interview<\/span><\/i>, a film mocking North Korean dictator Kim Jung-un. A British television network was hacked for airing a drama on North Korean governmental abuses. There have been allegations of attempted hacks on utility companies, rail systems, and most recently via the zero-day exploit on Adobe Flash Player. <\/span><\/p>\n

The big takeaway here is that nation-state hackers will target anyone and everyone they believe to be a viable target\u2014whether for their personal financial gain, to throw their enemies\u2019 everyday lives into disorder, or to silence criticism half a world away. If your enterprise falls on their radar, you might be next. Even if you only utilize larger organizations as vendors or are a vendor to those enterprises, there is still the potential for you to be caught in the blast…<\/span>or the infection vector<\/span><\/a>. No enterprise, regardless of industry, is safe from this new kind of warfare. \u00a0<\/span><\/p>\n

To quote <\/span>Chris Murphy<\/span><\/a>: \u201cCyber warfare has no innocents; only collateral damage. Nations don\u2019t just attack each other. They attack business processes, financial assets, trade secrets, etc. The current cyber war is being conducted using state-of-the-art technology to attack a security model that hasn\u2019t evolved since the introduction of security on the Internet.\u201d <\/span><\/p>\n

Governments Are Relatively Powerless to Stop Nation-State Hackers<\/b><\/h3>\n

To indulge in some political science jargon for a moment, a nation-state at its absolute core is successful if the government can enforce its will inside its claimed borders. However, this definition only pertains to the physical borders, at least in its classic understanding. Digital borders have proven far more porous and difficult to enforce. <\/span><\/p>\n

All of the accusations against North Korea have remained in the realm of unproven allegations, at least to the public\u2019s knowledge. None of them have translated into direct governmental or international action against the country. This is in part because hacking is so anonymized a process that finding the definitive proof that a specific nation-state was behind this or that attack can be the metaphorical needle-in-a-haystack; many of North Korea\u2019s hackers conduct their attacks outside the country and with their own modular programs, making tracing futile. <\/span><\/p>\n

Furthermore, digital retaliation is out of the question. The North Korean infrastructure is so primitive it renders any such attempt worthless. The country is already economically sanctioned, which means adding more would be a meaningless exercise. And no country is willing to risk a physical confrontation over a digital allegation. This leaves us in a world where nation-state hackers can do massive damage with almost no resistance on the global stage.<\/span><\/p>\n

This means your enterprise must face this coordinated, well-funded, and highly trained group of threat actors virtually alone. Your cybersecurity defense falls squarely on your shoulders\u2014the government can\u2019t shoulder it themselves\u2014and therefore it needs to be taken seriously. <\/span><\/p>\n

The Japanese government claims it asked Coincheck to improve their digital security before the attack, but the exchange took no action and suffered the consequences. Don\u2019t make the same mistake: work with a <\/span>solution provider<\/span><\/a> to fortify your network, support your cybersecurity team\u2019s efforts to monitor for malicious activity, and have an incident response plan in place for when the worst happens. With the right preparation you can deter and mitigate attacks and save your company millions. <\/span><\/p>\n

It\u2019s More than North Korean Hackers<\/b><\/h3>\n

We\u2019ve been talking about North Korea because they are currently the (allegedly) most visible nation-state utilizing threat actors for their own gain, but they are far from the only one to do so. We all know about Russia\u2019s interference with the U.S. and French elections. Recent reports suggest Chinese intelligence is using fake LinkedIn profiles to glean corporate information. This is the new face of international conflict; not a physical war but the same ill intent and with no regard for the distinction between civilian and soldier. <\/span><\/p>\n

Your enterprise\u2019s data might be a valuable target for an enemy strapped for cash, or who thinks that stealing it might cause general mayhem. You need to be prepared for the reality that the local bedroom hacker may not be the face of digital threats for much longer. A more professional and more motivated visage may be peering back at you from the other side of the screen.<\/span><\/p>\n
Widget not in any sidebars
\n","protected":false},"excerpt":{"rendered":"

Just last month, the world was rocked by one of the largest cryptocurrency heists in history. Coincheck, Japan\u2019s largest cryptocurrency exchange, reported that hackers stole the digital equivalent of $530 million. Even previously massive cryptocurrency thefts, like the one at NiceHash in December, pale in comparison to this one. \u00a0 Adding a new and concerning […]<\/p>\n","protected":false},"author":41,"featured_media":2501,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[95,145,112,86,536,537,21,57],"acf":[],"yoast_head":"\n3 Ways the North Korean Digital Crimewave Affects Your Enterprise<\/title>\n<meta name=\"description\" content=\"Here\u2019s 3 things to keep in mind about the North Korean hacking crimewave and how it might seriously disrupt your enterprise.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"3 Ways the North Korean Digital Crimewave Affects Your Enterprise\" \/>\n<meta property=\"og:description\" content=\"Here\u2019s 3 things to keep in mind about the North Korean hacking crimewave and how it might seriously disrupt your enterprise.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-06T19:44:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-14T14:01:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/North-Korea-Flag-Mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/\",\"name\":\"3 Ways the North Korean Digital Crimewave Affects Your Enterprise\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/North-Korea-Flag-Mod.jpg\",\"datePublished\":\"2018-02-06T19:44:47+00:00\",\"dateModified\":\"2022-07-14T14:01:12+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Here\u2019s 3 things to keep in mind about the North Korean hacking crimewave and how it might seriously disrupt your enterprise.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/North-Korea-Flag-Mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/North-Korea-Flag-Mod.jpg\",\"width\":800,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"3 Ways the North Korean Digital Crimewave Affects Your Enterprise\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"3 Ways the North Korean Digital Crimewave Affects Your Enterprise","description":"Here\u2019s 3 things to keep in mind about the North Korean hacking crimewave and how it might seriously disrupt your enterprise.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/","og_locale":"en_US","og_type":"article","og_title":"3 Ways the North Korean Digital Crimewave Affects Your Enterprise","og_description":"Here\u2019s 3 things to keep in mind about the North Korean hacking crimewave and how it might seriously disrupt your enterprise.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2018-02-06T19:44:47+00:00","article_modified_time":"2022-07-14T14:01:12+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/North-Korea-Flag-Mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/","name":"3 Ways the North Korean Digital Crimewave Affects Your Enterprise","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/North-Korea-Flag-Mod.jpg","datePublished":"2018-02-06T19:44:47+00:00","dateModified":"2022-07-14T14:01:12+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Here\u2019s 3 things to keep in mind about the North Korean hacking crimewave and how it might seriously disrupt your enterprise.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/North-Korea-Flag-Mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/03\/North-Korea-Flag-Mod.jpg","width":800,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/3-ways-north-korean-digital-crimewave-affects-enterprise\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"3 Ways the North Korean Digital Crimewave Affects Your Enterprise"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1281"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=1281"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1281\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2501"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=1281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=1281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=1281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}