Thursday, July 9, 2020
Home Lead Story North Korea Hackers Target Think Tanks, Activists; Reveals Microsoft

North Korea Hackers Target Think Tanks, Activists; Reveals Microsoft

By using forwarding rules, Thallium can continue to see email received by the victim, even after the victim's account password is updated

Microsoft has revealed that a North Korea-linked hacker group has stolen the sensitive personal information of government employees, think tanks, university staff members, members of organizations focused on world peace and human rights, as well as individuals who work on nuclear proliferation-related issues.

Microsoft has now gained control of 50 domains that the group uses to conduct its operations, the company said on Monday.

With this action, the sites can no longer be used to execute attacks.

A court case against the hacker group, called Thallium, filed in the US District Court for the Eastern District of Virginia, resulted in a court order enabling Microsoft to take control of the web domains, Microsoft Customer Security and Trust Vice President Tom Burt said in a blog post.

Microsoft’s Digital Crimes Unit (DCU) and the Microsoft Threat Intelligence Center (MSTIC) has been tracking and gathering information on Thallium, monitoring the group’s activities to establish and operate a network of websites, domains and Internet-connected computers.

This network was used to target victims and then compromise their online accounts, infect their computers, compromise the security of their networks and steal sensitive information.

Most targets were based in the US, as well as Japan and South Korea, Burt said.

Like many cybercriminals and threat actors, Thallium typically attempts to trick victims through a technique known as spear phishing.

FILE - Microsoft Corp. signage is shown outside the Microsoft Visitor Center in Redmond, Wash.
FILE – Microsoft Corp. signage is shown outside the Microsoft Visitor Center in Redmond, Wash. VOA

By gathering information about the targeted individuals from social media, public personnel directories from organizations the individual is involved with and other public sources, Thallium is able to craft a personalized spear-phishing email in a way that gives the email credibility to the target.

The link in the email redirects the user to a website requesting the user’s account credentials.

By tricking victims into clicking on the fraudulent links and providing their credentials, Thallium is then able to log into the victim’s account.

Upon successful compromise of a victim account, Thallium can review emails, contact lists, calendar appointments and anything else of interest in the compromised account.

The hackers often also creates a new mail forwarding rule in the victim’s account settings. This mail forwarding rule will forward all new emails received by the victim to Thallium-controlled accounts.

Also Read: Actor Pankaj Tripathi Likes to Put Work Before Vacay Plans

By using forwarding rules, Thallium can continue to see email received by the victim, even after the victim’s account password is updated.

“You can protect yourself from these types of attacks in at least three ways. We recommend, first, that you enable two-factor authentication on all business and personal email accounts,” Burt said.

“Second, learn how to spot phishing schemes and protect yourself from them. Third, enable security alerts about links and files from suspicious websites and carefully check your email forwarding rules for any suspicious activity,” he added. (IANS)

STAY CONNECTED

18,991FansLike
362FollowersFollow
1,782FollowersFollow

Most Popular

Less Sleep Can Harm Your Child’s Mental Health

Dear parents, if you want your child to be mentally fit, Read on. Inadequate nighttime sleep alters several aspects of children's emotional health, warn...

Add Fruits and Vegetables to Your Diet to Reduce Type 2 Diabetes Risk

Higher consumption of fruit, vegetables, and whole-grain foods are associated with a lower risk of developing type 2 diabetes, say researchers. The findings, published in...

In Conversation with Pravesh Mallick

Pravesh Mallick is an Indian and Nepali composer, songwriter and playback singer who has worked in several movies and projects including 'Transparency: Pardarshita', 'Jai...

Home-schooling Tips During Coronavirus

Parenting could be hard during a pandemic, especially when your child's physical classes are on hold. If you are helping your child learn from...

Dealing with Muscle Pain During Covid

In times of COVID-19 and the lockdown, most people have been staying indoors and levels of activity have decreased significantly. Work from home has...

49% Indians Feel Chinese Firms Should be Allowed to Sell Products: Survey

A survey has found that around 49 per cent of its respondents feel that Chinese companies should be allowed to sell products in India,...

People Opting for Domestic Trips Post-Pandemic

By Siddhi Jain After a long stretch of staying-at-home, consumers are quick to show willingness to go out and travel again, albeit within driving distance...

eRaksha Competition 2020: Creating Cyber Awareness Among Youth

Online learning has become the need of the hour and the most viable resource that has come to the aid of children and their...

Recent Comments