Expert finds more North Korea links in ransomware attack

Associated Press | Published: 14:25, May 16,2017 | Updated: 14:52, May 16,2017


A customer walks by the notice about ‘ransomware’ at CGV theater in Seoul, South Korea, May 15, 2017. The letters read ‘Due to ransomware affection, we are unable to screen advertisement. The movie is going to start 10 minutes after the ticket time.’ — AP photo

A South Korean cyber security expert says there is more circumstantial evidence that North Korea may be behind the global ‘ransomware’ attack: the way hackers took computers hostage was similar to previous cyberattacks attributed to North Korea.

Simon Choi, a director at anti-virus software company Hauri Inc, said Tuesday that North Korea is no newcomer in the world of Bitcoin and it has been mining Bitcoin using malicious computer programmes as early as 2013.

Last year, Choi accidentally spoke to a hacker traced to a Pyongyang internet address about development of ransomware and he alerted South Korean authorities.

Researchers at Symantec and Kaspersky Lab also found similarities between WannaCry malware in the latest cyberattack and previous attacks blamed on North Korea.

Want stories like this in your inbox?

Sign up to exclusive daily email