The campaign includes so-called spearphishing attacks—which use fraudulent email to infect a computer or persuade the victim to reveal a password or other information—and social engineering schemes. Treasury Department and U.S. Cyber Command said in a joint statement. The hackers have also aimed at retail payment infrastructures and interbank payment processors, the agencies said. “North Korean cyber actors have demonstrated an imaginative knack for adjusting their tactics to exploit the financial sector as well as any other sector through illicit cyber operations,” Bryan Ware, assistant director for cybersecurity at the Department of Homeland Security, said in a statement. That revenue has been critical in offsetting income from other activities lost in the wake of economywide U.N. sanctions.

Source: Wall Street Journal August 26, 2020 19:30 UTC