 Israel stops attempted cyberattack on defense companies Washington DC (UPI) Aug 12, 2020 - An attempted cyberattack on Israeli defense companies was stopped, the country's Defense Ministry announced on Wednesday. Government officials said the attack came from an "international cyber group called 'Lazarus,'" which used fake profiles on the social media platform LinkedIn in an attempt to gain access to computer systems. "The Malamav [an agency of Israeli government security], in cooperation with other bodies in the security community, thwarted a cyberattack against leading defense industries in the State of Israel," the Defense Ministry said in a Twitter message. The scheme aimed to send corrupt computer files hidden in job offers from impersonated CEOs and human resources offices at Israeli high-tech firm in order to eventually gather sensitive information, officials said. Israel did not identify a foreign country as the attacker, but the United States has linked "Lazarus" to North Korea. Israeli officials also did not name the companies involved in the potential security breaches. The cyberattacks were discovered in real time, with no interruption to the work of the defense companies, the Defense Ministry said. The country's Security Directorate has launched an investigation with other security agencies and the defense industry.
|
The Israeli defence ministry said on Wednesday that it had foiled an attempted cyber attack by a foreign group targeting the country's defence manufacturers.
It said the attempt was made by "an international cyber group called 'Lazarus,' an organisation that is backed by a foreign country."
The United States has linked Lazarus to North Korea's regime, but the Israeli statement did not identify the foreign country concerned, nor did it say when the attempted attack took place or which firms it targeted.
Contacted by AFP, the defence ministry declined to provide further details.
"The cyber-attacks were identified in real time, and thwarted," it said in an English language statement, adding that "no harm or disruption" was caused.
In March the US Treasury sanctioned two Chinese citizens and accused them of working with Lazarus Group, sponsored by North Korea and blamed for the April 2018 hack of an unnamed crypto-currency exchange in which about $250 million was stolen.
Last September, Washington issued sanctions against three North Korean entities accused in cyber attacks, including the Lazarus Group, which was involved in the theft of around $80 million from the central bank of Bangladesh.
It was also accused of being behind the WannaCry attack in 2017 that affected approximately 300,000 computers worldwide including in the US, Canada and New Zealand.
The heaviest hit was Britain's public health system, with hospitals virtually shut down and thousands of patients turned away, costing the government ultimately more than $112 million.
Created in 2007, Lazarus Group has been known to authorities for years and was sanctioned by the United Nations in 2016.
The US Treasury said it was tied to the Reconnaissance General Bureau, Pyongyang's main intelligence agency.
In the Israeli incident, the defence ministry statement said, "the attackers impersonated managers, CEOs and leading officials in HR departments... and contacted employees of leading defence industries in Israel."
It said they posed as personnel recruiters and sought to tempt the employees with lucrative employment opportunities.
In the process, it said, they attempted to hack employees' computers "and gather sensitive security information".
Israel is a constant target of hacking attacks and has an extensive network of agencies tasked with countering the threats.
Israeli defence exports totalled $7.2 billion in 2019, with the bulk going to Asia and the Pacific region.
Related Links
Cyberwar - Internet Security News - Systems and Policy Issues
|
|
Tweet |
|
|
|
del.icio.us
Digg
Reddit
Google
