{"id":1479,"date":"2018-04-27T10:22:09","date_gmt":"2018-04-27T14:22:09","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=1479"},"modified":"2018-04-27T10:22:09","modified_gmt":"2018-04-27T14:22:09","slug":"mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/","title":{"rendered":"McAfee Uncovers Nation-State Cybercrime Campaign: Operation GhostSecret"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1480\" src=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png\" alt=\"operation ghostseceret\" width=\"800\" height=\"350\" srcset=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png 800w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod-300x131.png 300w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod-768x336.png 768w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod-600x263.png 600w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod-180x79.png 180w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod-400x175.png 400w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">McAfee Advanced Threat Research has uncovered evidence of a major international cybercrime campaign\u2014labeled Operation GhostSecret by the endpoint security and <\/span><a href=\"https:\/\/solutionsreview.com\/security-information-event-management\/1122-2\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">SIEM solution <\/span><\/a><span style=\"font-weight: 400\">provider\u2014linked to nation-state hackers.<\/span><\/p>\n<br \/>Widget not in any sidebars<br \/>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">According to the evidence, Operation GhostSecret aims to steal proprietary data from enterprises representing a range of industries including entertainment, telecommunications, healthcare, and finance. The campaign appears to have begun with the targeting of <\/span><a href=\"https:\/\/solutionsreview.com\/security-information-event-management\/north-korea-inflicts-financial-cyber-attack-turkey\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Turkish financial institutions in early March<\/span><\/a><span style=\"font-weight: 400\"> and has not abated since then. In total, 17 countries have been targeted, including the United States, Australia, Japan, and China. Thailand in particular was targeted, suffering the most malware connected to Operation GhostSecret. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">In a statement, McAfee\u2019s Chief Scientist Raj Samani said: \u201cAs we monitor this campaign, it is clear that the publicity associated with the (we assume) first phase of this campaign did nothing to slow the attacks. The threat actors not only continued but also increased the scope of the attack, both in types of targets and in the tools they used.\u201d<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">While it has not been definitively confirmed as of time of writing, the techniques of Operation GhostSecret implicate the Lazarus Group as the cybercriminals behind these nation-state attacks. Lazarus, also referred to as Hidden Cobra, has long been affiliated with North Korean military intelligence. They are suspected as responsible for the data breach at Sony Pictures in 2014 and the more recent ransomware wave known as WannaCry; they\u2019ve also been suspected of cryptocurrency thefts across the globe in an effort to fund the heavily-sanctioned North Korean regime. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Whether Operation GhostSecret represents a transition in nation-state attacks as priorities shift from direct attacks on military-industrial data to creating more general chaos, or whether that transition already began with WannaCry, enterprises should take notice. You may be up against hackers with the backing of entire countries. You need to ensure your information security solution is up to the task. \u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">You can download McAfee\u2019s full report <\/span><a href=\"https:\/\/securingtomorrow.mcafee.com\/mcafee-labs\/global-malware-campaign-pilfers-data-from-critical-infrastructure-entertainment-finance-health-care-and-other-industries\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">here.<\/span><\/a><\/p>\n<p><span style=\"font-weight: 400\"><br \/>Widget not in any sidebars<br \/>\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>McAfee Advanced Threat Research has uncovered evidence of a major international cybercrime campaign\u2014labeled Operation GhostSecret by the endpoint security and SIEM solution provider\u2014linked to nation-state hackers. According to the evidence, Operation GhostSecret aims to steal proprietary data from enterprises representing a range of industries including entertainment, telecommunications, healthcare, and finance. The campaign appears to have [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":1480,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[3],"tags":[95,145,112,86,536,660,22],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>McAfee Uncovers Cybercrime Campaign: Operation GhostSecret<\/title>\n<meta name=\"description\" content=\"McAfee Advanced Threat Research has uncovered evidence of a major international cybercrime campaign\u2014labeled Operation GhostSecret.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"McAfee Uncovers Cybercrime Campaign: Operation GhostSecret\" \/>\n<meta property=\"og:description\" content=\"McAfee Advanced Threat Research has uncovered evidence of a major international cybercrime campaign\u2014labeled Operation GhostSecret.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions &amp; Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-27T14:22:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/\",\"name\":\"McAfee Uncovers Cybercrime Campaign: Operation GhostSecret\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png\",\"datePublished\":\"2018-04-27T14:22:09+00:00\",\"dateModified\":\"2018-04-27T14:22:09+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"McAfee Advanced Threat Research has uncovered evidence of a major international cybercrime campaign\u2014labeled Operation GhostSecret.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png\",\"width\":800,\"height\":350,\"caption\":\"operation ghostseceret\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"McAfee Uncovers Nation-State Cybercrime Campaign: Operation GhostSecret\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions &amp; Vendors\",\"description\":\"Buyer&#039;s Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"McAfee Uncovers Cybercrime Campaign: Operation GhostSecret","description":"McAfee Advanced Threat Research has uncovered evidence of a major international cybercrime campaign\u2014labeled Operation GhostSecret.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/","og_locale":"en_US","og_type":"article","og_title":"McAfee Uncovers Cybercrime Campaign: Operation GhostSecret","og_description":"McAfee Advanced Threat Research has uncovered evidence of a major international cybercrime campaign\u2014labeled Operation GhostSecret.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions &amp; Vendors","article_published_time":"2018-04-27T14:22:09+00:00","og_image":[{"width":800,"height":350,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png","type":"image\/png"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/","name":"McAfee Uncovers Cybercrime Campaign: Operation GhostSecret","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png","datePublished":"2018-04-27T14:22:09+00:00","dateModified":"2018-04-27T14:22:09+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"McAfee Advanced Threat Research has uncovered evidence of a major international cybercrime campaign\u2014labeled Operation GhostSecret.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/04\/ghostsecret-mod.png","width":800,"height":350,"caption":"operation ghostseceret"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/mcafee-uncovers-nation-state-cybercrime-campaign-operation-ghostsecret\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"McAfee Uncovers Nation-State Cybercrime Campaign: Operation GhostSecret"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions &amp; Vendors","description":"Buyer&#039;s Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1479"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=1479"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1479\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1480"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=1479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=1479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=1479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}