North Korean network breached, hackers claim

Two hackers identified by the code names Saber and cyber0rg published a recent report saying they had breached a North Korean hacker network, according to a report in the cybersecurity outlet Phrack.

The dramatic break involved compromising a North Korean workstation of a hacker identified only as “Kim” who works for a Pyongyang cyber espionage group called Kimsuky, also known as Advanced Persistent Threat 43 and Thallium.

Documents from the hack were posted by DDoSecrets, a nonprofit group that exposes leaked data.

Kimsuky is said to be both a government intelligence-gathering network and criminal enterprise seeking to steal and launder cryptocurrency.

The compromise of the North Korean network “shows a glimpse how openly ‘Kimsuky’ cooperates with Chinese [government hackers] and shares their tools and techniques,” the hackers wrote.