Report: North Korean Hackers Infiltrated Chile’s ATM Network via Skype
Ami Rojkes Dombe
| 16/01/2019
https://www.zdnet.com/article/north-korean-hackers-infiltrate-chiles-atm-network-after-skype-job-interview/
North Korean hackers are believed to be behind the infiltration to the computer network of Redbanc, the company that interconnects the ATM infrastructure of all Chilean banks, ZDNet reported Wednesday.
According to the report, the recently disclosed attack on the Chilean interbank network appears to be linked to the North Korean hacking group known as Lazarus (or Hidden Cobra), which is known to have links to the Pyongyang regime.
Lazarus’ recent attack took place late December 2018 but only came to the public’s attention after Chilean Senator Felipe Harboe called out Redbanc on Twitter last week for not disclosing its security breach.
The company, which has direct lines into the networks of all Chilean banks, formally admitted to the hack a day later in a message posted on its website, but that announcement didn't include any details about the intrusion.
A day after Redbanc's admission, an investigation conducted by Chilean tech news site trendTIC revealed that the firm was the victim of a severe cyber attack. According to reporters, the source of the hack was identified as a LinkedIn ad for a developer position at another company to which one of the Redbanc employees applied.
The hiring company, believed to be a front for the Lazarus hackers, approached the Redbanc employee for an interview, which they conducted in Spanish via a Skype call. During this interview, the Redbanc employee was asked to download, install, and run a program that would generate a standard application form. The file downloaded and installed was, in fact, a malware program.
The malware collected information about the Redbanc employee's work PC and sent it back to a remote server. The information was later used by the hackers to enter the network.
https://www.zdnet.com/article/north-korean-hackers-infiltrate-chiles-atm-network-after-skype-job-interview/
North Korean hackers are believed to be behind the infiltration to the computer network of Redbanc, the company that interconnects the ATM infrastructure of all Chilean banks, ZDNet reported Wednesday.
According to the report, the recently disclosed attack on the Chilean interbank network appears to be linked to the North Korean hacking group known as Lazarus (or Hidden Cobra), which is known to have links to the Pyongyang regime.
Lazarus’ recent attack took place late December 2018 but only came to the public’s attention after Chilean Senator Felipe Harboe called out Redbanc on Twitter last week for not disclosing its security breach.
The company, which has direct lines into the networks of all Chilean banks, formally admitted to the hack a day later in a message posted on its website, but that announcement didn't include any details about the intrusion.
A day after Redbanc's admission, an investigation conducted by Chilean tech news site trendTIC revealed that the firm was the victim of a severe cyber attack. According to reporters, the source of the hack was identified as a LinkedIn ad for a developer position at another company to which one of the Redbanc employees applied.
The hiring company, believed to be a front for the Lazarus hackers, approached the Redbanc employee for an interview, which they conducted in Spanish via a Skype call. During this interview, the Redbanc employee was asked to download, install, and run a program that would generate a standard application form. The file downloaded and installed was, in fact, a malware program.
The malware collected information about the Redbanc employee's work PC and sent it back to a remote server. The information was later used by the hackers to enter the network.
