“It is likely that the variation in the dollar value of cryptocurrency in recent months affected these estimates, but both show that 2022 was a record year for the theft of virtual assets from the DPRK“, the UN report said.
In addition, this report stated that “techniques used by cyber threat actors have become more sophisticatedwhich makes it difficult to track stolen funds”.
How were the robberies carried out?
In addition, it was reported that in many cases the robberies were carried out deploying malware through different methodsincluding the phishing. One of them bells was aimed at employees of organizations from several countries.
“The initial contacts with people were made via LinkedInand once a level of confidence was established with the objectives, malicious payloads were sent through continuous communications via WhatsApp”, says the UN report.
He also said that, according to a cybersecurity company, a group linked to North Korea known as HOlyGhOst had “extorted bailouts of small and medium-sized companies in various countries through ransomware distribution in a widespread financially motivated campaign.
Source: Ambito