WASHINGTON/TORONTO: The US government on Tuesday issued a rare alert on the activities of a hacking group it dubbed “Hidden Cobra,” saying the group was part of the North Korean government and that more attacks were likely.
The joint alert from the US Department of Homeland Security and the Federal Bureau of Investigation said that “cyber actors of the North Korean government” had targeted the media, aerospace and financial sectors, as well as critical infrastructure, in the United States and globally.
North Korea has routinely denied involvement in cyber attacks against other countries.
The North Korean mission to the United Nations was not immediately available for comment.
The alert said Hidden Cobra has compromised a range of victims since 2009 and that some intrusions had resulted in thefts of data while others were disruptive.
The group´s capabilities include denial of service attacks, which send reams of junk traffic to a server to knock it offline, keyloggers,
remote access tools and several variants of malware, the alert said.
Hidden Cobra commonly targets systems that run older versions of Microsoft Corp operating systems that are no longer patched, the alert said.