North Korea backed hackers targeting security researchers, Google claims

26 January 2021, 12:34

Google
North Korean-backed hackers targeting security researchers, Google claims. Picture: PA

Attackers would lure security researchers into collaborating via social media and a fake blog.

Google has warned security researchers they are being targeted by an ongoing government-backed hacking campaign based in North Korea.

The tech giant said it uncovered several false social media profiles on platforms including Twitter and LinkedIn, where bad actors would lure targets to a fake blog featuring “guest” posts from unwitting legitimate security researchers.

According to Google’s Threat Analysis Group, attackers would then start talking to potential targets, asking if they would like to work together on cyber vulnerability research and use collaboration tools with hidden malware.

In several cases, this allowed perpetrators to install a backdoor on to victims’ computers, even if they were running up-to-date versions of Windows 10 and the Chrome web browser.

“Over the past several months, the Threat Analysis Group has identified an ongoing campaign targeting security researchers working on vulnerability research and development at different companies and organisations,” said Adam Weidemann, from Google’s Threat Analysis Group.

“We hope this post will remind those in the security research community that they are targets to government-backed attackers and should remain vigilant when engaging with individuals they have not previously interacted with.”

Examples of fake accounts used by hackers
Examples of fake accounts used by hackers (Google/PA)

It comes as North Korea was recently accused by Microsoft of attempting to hack data from pharmaceutical firms and coronavirus vaccine researchers.

In November, the company said that state-backed hackers run by Russia and North Korea had targeted people located in Canada, France, India, South Korea and the US who are “directly involved in researching vaccines and treatments for Covid-19”.

Stuart Reed, UK director of security provider Orange Cyberdefense, said: “This is another example of an attempt by highly sophisticated cyberthreat actors to attack the people that are trying to protect us.

“In the past year we have seen a growing number of such incidents – hackers using social engineering attacks, malware campaigns and a whole host of other tricks to disrupt, misinform, aggravate existing geopolitical tensions and generally spread harm.

“As a result, the emergent threat model has shifted, creating a new normal for cybersecurity professionals trying to temper panic and anxiety with logical, strategic thinking.”

By Press Association

More Technology News

See more More Technology News

A laptop

Millions of older people being cut off by lack of basic internet skills – Age UK

A computer screen

Leading AI figures awarded honours

AI warning

Essays written with ChatGPT feature repetition of words and ideas – study

A broadband router

Big four broadband firms beaten by smaller rivals in latest Which? survey

A person pressing on the Tik Tok logo on the screen of a smartphone

TikTok to launch online election centres to counter misinformation

A person using a laptop

Up to eight million UK jobs at risk from AI, report says

Smartphone showing apps

One in six adolescents have experienced cyberbullying, global study finds

An Uber Eats driver

Uber Eats driver wins payout over discriminatory facial recognition checks

Rishi Sunak visits Cumbria

Sunak says UK ‘more robust’ on China than most allies

Chinese President state visit – Preparations

Minister calls China ‘security threat’ after UK and US blame Beijing for hacking

China

UK and US accuse China of ‘malicious’ global cyber attacks

A hand on a laptop

Tougher action needed to combat copycat banking websites, says Which?

Dowden

Dowden guarantees UK elections will be safe from Chinese cyber attacks

A woman’s hand pressing a key of a laptop keyboard

Cyber security agency says China behind ‘malicious’ cyber attacks on UK

A young girl uses the TikTok app on a smartphone

TikTok Youth Council holds first meetings on better online safety for teenagers

Margrethe Vestager

EU opens competition investigations into Apple, Google and Meta