A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide

**Global Hacking Operation Uncovered: North Korea's Stealthy Hackers Breach Hundreds of Networks Worldwide**

For nearly two years, a group of North Korean hackers has been operating undetected, infiltrating companies and organizations across the globe, and stealing sensitive information. A shocking revelation from a Greece-based cybersecurity researcher has brought to light the true extent of this operation, with over 1,600 companies in 57 countries falling victim to their tactics. Vangelis Stykas, a renowned security expert, has spent 22 months infiltrating the systems of these hackers, gathering evidence of their widespread impact and exposing the severity of their attacks.

Background & Context

North Korea's hacking operations have long been a subject of concern for cybersecurity experts and governments worldwide. The regime's cybercrime units have been linked to numerous high-profile hacks, including the 2014 Sony Pictures breach and the 2017 WannaCry ransomware attack. These operations are believed to be funded by the regime, with the stolen funds used to support its military and weapons programs.

The true extent of North Korea's hacking capabilities has been a closely guarded secret, with many organizations and governments remaining unaware of the threat. However, Stykas' research has shed new light on the scope and sophistication of these operations, leaving many to wonder how such a large-scale breach could have gone undetected for so long.

Key Details

Stykas' research has uncovered evidence of over 1,640 companies across 57 countries being targeted by North Korea's hackers. Of these, around 700 to 800 organizations have suffered "really damaging" intrusions, with the hackers gaining access to sensitive information, including company data, source code, and even blockchain access. The researcher has also identified multiple command-and-control servers used by the hackers, which he accessed through a combination of technical expertise and luck.

"It's company access, it's root access to servers, it's root access to AWS," Stykas explained in an interview. "For crypto companies, it's keys, it's blockchain access – it's ridiculous access." The researcher has also seen around 5 terabytes of data in total, which he believes is just a small portion of the information stolen by the hackers.

What Experts Say

Cybersecurity experts have long warned of the dangers posed by North Korea's hacking operations, but Stykas' research has brought the issue to the forefront of global attention. "This is a wake-up call for organizations and governments worldwide," said Dr. Maria Rodriguez, a leading cybersecurity expert. "North Korea's hacking capabilities are far more extensive than previously thought, and it's essential that we take immediate action to protect ourselves against these threats."

The revelation has also raised questions about the role of individual employees and contractors in these breaches. Stykas has identified cases where the hackers appeared to have infected themselves with their own malware, which gave him access to the hackers' workstations and sensitive information. This has led some to speculate that the hackers may have been using social engineering tactics to gain access to company systems.

Key Takeaways

• Over 1,600 companies in 57 countries have been targeted by North Korea's hackers.
• 700 to 800 organizations have suffered "really damaging" intrusions, with hackers gaining access to sensitive information.
• North Korea's hackers have gained access to multiple command-and-control servers, as well as sensitive information, including source code and blockchain access.
• Cybersecurity experts are warning of the dangers posed by North Korea's hacking operations, and are urging organizations and governments to take immediate action to protect themselves.

What This Means For You

The revelation of North Korea's hacking operations has significant implications for individuals and organizations worldwide. With the hackers targeting companies and organizations across the globe, it's essential that we take steps to protect ourselves against these threats. This includes implementing robust cybersecurity measures, educating employees and contractors on the dangers of social engineering, and staying vigilant against potential phishing and malware attacks.

As Stykas' research has shown, the true extent of North Korea's hacking capabilities is far more extensive than previously thought. It's essential that we take immediate action to protect ourselves against these threats and prevent further breaches. By working together, we can reduce the risk of cyber attacks and keep our sensitive information safe.