Search This Blog
Powered by Blogger.

Blog Archive

Labels

Load More
Trendy Right Now

Popular Posts

Showing posts with label Military Data. Show all posts
Vulnerabilities and Exploits
China Data Privacy Laws Data protection geolocation Military Data Sensitive data unauthorised access Vulnerabilities and Exploits

China Launches Probe into Geographic Data Security

China has started a security investigation into the export of geolocation data, a development that highlights the nation's rising concerns about data security. The probe, which was made public on December 11, 2023, represents a major advancement in China's attempts to protect private information, especially geographic information that can have national security ramifications.

The decision to scrutinize the outbound flow of geographic data comes amid a global landscape increasingly shaped by digital technologies. China, like many other nations, recognizes the strategic importance of such data in areas ranging from urban planning and transportation to military operations. The probe aims to ensure that critical geographic information does not fall into the wrong hands, posing potential threats to the nation's security.

The official statements from Chinese authorities emphasize the need for enhanced cybersecurity measures, especially concerning data breaches that could affect transportation and military operations. The concern is not limited to unauthorized access but extends to the potential misuse of geographic information, which could compromise critical infrastructure and national defense capabilities.

"Geographic information is a cornerstone of national security, and any breaches in its handling can have far-reaching consequences," a spokeswoman for China's Ministry of Public Security said. In order to stop unwanted access or abuse, our objective is to locate and fix any possible weaknesses in the system."

International watchers have taken notice of the development, which has sparked concerns about the wider ramifications for companies and organizations that deal with geolocation data. Other countries might review their own cybersecurity regulations as a result of China's aggressive steps to bolster its data protection safeguards.

This development aligns with a global trend where countries are increasingly recognizing the need to regulate and protect the flow of sensitive data, particularly in the digital age. As data becomes a valuable asset with strategic implications, governments are compelled to strike a balance between fostering innovation and safeguarding national interests.

China's security probe into the export of geographic data signals a heightened awareness of the potential risks associated with data breaches. As the world becomes more interconnected, nations are grappling with the challenge of securing critical information. The outcome of China's investigation will likely shape future policies and practices in data security, setting a precedent for other countries to follow suit in safeguarding their digital assets.

Read more »
South Korea
Andariel Data Breach Hacker group Military Data North Korea North Korean Hackers Ransomware group South Korea

Seoul Police Reveals: North Korean Hackers Stole South Korean Anti-Aircraft Data


South Korea: Seoul police have charged Andariel, a North Korea-based hacker group for stealing critical defense secrets from South Korea’s defense companies. Allegedly, the laundering ransomware is redirected to North Korea. One of the 1.2 terabytes of data the hackers took was information on sophisticated anti-aircraft weaponry.  

According to the Seoul Metropolitan Police Agency, the hacker group utilized servers that they had rented from a domestic server rental company to hack into dozens of South Korean organizations, including defense companies. Also, the ransomware campaign acquired ransoms from a number of private sector victim firms. 

Earlier this year, the law enforcement agency and the FBI jointly conducted an investigation to determine the scope of Andariel's hacking operations. This was prompted by reports from certain South Korean corporations regarding security problems that were believed to be the result of "a decline in corporate trust." 

Andariel Hacker Group 

In an investigation regarding the origin of Andariel, it was found that it is a subgroup of the Lazarus Group. The group has stolen up to 1.2 terabytes of data from South Korean enterprises and demanded 470 million won ($357,000) in Bitcoin as ransom from three domestic and international organizations.  

According to a study conducted by Mandiant, it was revealed that Andariel is operated by the North Korean intelligence organization Reconnaissance General Bureau, which gathers intelligence for the regime's advantage by mainly targeting international enterprises, governmental organizations, defense companies, and financial services infrastructure. 

Apparently, the ransomware group is also involved in cybercrime activities to raise funds for conducting its operation, using specially designed tools like the Maui ransomware and DTrack malware to target global businesses. In February, South Korea imposed sanctions on Andariel and other hacking groups operating in North Korea for engaging in illicit cyber operations to fund the dictatorial regime's nuclear and missile development projects.  

The threat actor has used a number of domestic and foreign crypto exchanges, like Bithumb and Binance, to launder the acquired ransom. Till now, a sum of 630,000 yuan ($89,000) has been transferred to China's K Bank in Liaoning Province. The hackers proceeded to redirect the laundered money from the K Bank branch to a location close to the North Korea-China border. 

Seoul police noted that they have seized the domestic servers and virtual asset exchange used by Andariel to conduct their campaigns. Also, the owner of the account, that was used in transferring the ransom, has been detained. 

"The Security Investigation Support Department of the Seoul Metropolitan Police Agency is actively conducting joint investigations with related agencies such as the U.S. FBI regarding the overseas attacks, victims and people involved in this incident, while continuing to investigate additional cases of damage and the possibility of similar hacking attempts," the agency said.

The police have warned businesses of the threat actor and have advised them to boost their cybersecurity and update security software to the latest versions. It has also been advised to organizations to encrypt any critical data, in order to mitigate any future attack. 

Moreover, police are planning to investigate server rental companies to verify their subscribers’ identities and to ensure that the servers have not been used in any cybercrime activity.  

Read more »
Subscribe to: Posts (Atom)