{"id":1992892,"date":"2023-08-07T07:39:02","date_gmt":"2023-08-07T11:39:02","guid":{"rendered":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/exclusive-north-korean-hackers-breached-top-russian-missile-maker\/"},"modified":"2023-08-07T07:44:12","modified_gmt":"2023-08-07T11:44:12","slug":"exclusive-north-korean-hackers-breached-top-russian-missile-maker","status":"publish","type":"post","link":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/exclusive-north-korean-hackers-breached-top-russian-missile-maker\/","title":{"rendered":"North Korean hackers infiltrate leading Russian missile manufacturer."},"content":{"rendered":"<aside class=\"mashsb-container mashsb-main mashsb-stretched\"><div class=\"mashsb-box\"><div class=\"mashsb-count mash-medium\" style=\"float:left\"><div class=\"counts mashsbcount\">16<\/div><span class=\"mashsb-sharetext\">SHARES<\/span><\/div><div class=\"mashsb-buttons\"><a class=\"mashicon-facebook mash-medium mash-nomargin mashsb-noshadow\" href=\"https:\/\/www.facebook.com\/sharer.php?u=https%3A%2F%2Fwww.conservativenewsdaily.net%2Fbreaking-news%2Fexclusive-north-korean-hackers-breached-top-russian-missile-maker%2F\" target=\"_top\" rel=\"nofollow\"><span class=\"icon\"><\/span><span class=\"text\">Facebook<\/span><\/a><a class=\"mashicon-twitter mash-medium mash-nomargin mashsb-noshadow\" href=\"https:\/\/twitter.com\/intent\/tweet?text=&amp;url=https:\/\/www.conservativenewsdaily.net\/breaking-news\/?p=1992892&amp;via=ConservNewsDly\" target=\"_top\" rel=\"nofollow\"><span class=\"icon\"><\/span><span class=\"text\">Twitter<\/span><\/a><a class=\"mashicon-subscribe mash-medium mash-nomargin mashsb-noshadow\" href=\"#\" target=\"_top\" rel=\"nofollow\"><span class=\"icon\"><\/span><span class=\"text\">Subscribe<\/span><\/a><div class=\"onoffswitch2 mash-medium mashsb-noshadow\" style=\"display:none\"><\/div><\/div>\n            <\/div>\n                <div style=\"clear:both\"><\/div><\/aside>\n            <!-- Share buttons by mashshare.net - Version: 4.0.47--><div class=\"entry-content\">\n<h2>An Elite Group of North Korean Hackers Breached Russian Missile Developer<\/h2>\n<p>By James\u200c Pearson and Christopher\u2064 Bing<\/p>\n<p>LONDON\/WASHINGTON (Reuters) \u2013\u200d An elite group of North Korean hackers secretly breached computer networks at a major Russian missile \u200ddeveloper\u200b for at least five months last year, according to technical evidence reviewed by Reuters and analysis by security researchers.<\/p>\n<div id=\"div-gpt-ad-1663871513696-art-1\" style=\"min-width: 320px; min-height: 50px;  text-align: center;\">  \t<script>  \t\tgoogletag.cmd.push(function() { googletag.display('div-gpt-ad-1663871513696-art-1'); });  \t<\/script>  <\/div>\n<div class=\"ad-slot__ad-label\">Advertisement<\/div>\n<\/p>\n<p>Reuters found\u200d cyber-espionage teams linked to the North Korean government, which security researchers call\u200d ScarCruft and Lazarus, <a href=\"https:\/\/www.conservativenewsdaily.net\/breaking-news\/exclusive-north-korean-hackers-breached-top-russian-missile-maker\/\" title=\"North Korean hackers infiltrate leading Russian missile manufacturer.\">secretly installed stealthy digital\u200b backdoors<\/a> into systems at NPO Mashinostroyeniya, a rocket \u200cdesign bureau based in Reutov, a small town on the outskirts of Moscow.<\/p>\n<p>Reuters could not determine whether any data was taken during the intrusion or what information may \u2062have\u200c been viewed. In the months following the digital break-in Pyongyang announced several developments in \u2064its banned ballistic \u200dmissile\u2062 programme but it \u200bis \u2063not clear\u200d if this was related to the\u200d breach.   \u200b     <\/p>\n<p>Experts say the incident shows how the isolated country \u200bwill \u200beven target its allies, such as Russia,\u200b in a \u200dbid to acquire critical technologies.<\/p>\n<p>NPO Mashinostroyeniya did not respond to requests from Reuters\u2063 for comment. Russia\u2019s embassy in Washington did not respond to an emailed request for comment. North Korea\u2019s mission to the United Nations \u200bin New York did not \u2064respond to a request for comment.<\/p>\n<p>News of the hack comes \u2063shortly after a \u2064trip to\u2062 Pyongyang last month by Russian defence minister Sergei Shoigu for\u2063 the 70th anniversary \u200bof the Korean War; the first visit by a Russian defence minister to North Korea since the 1991 breakup \u2064of the Soviet Union.<\/p>\n<p>The targeted company, commonly known as NPO Mash, has acted as a pioneer \u200cdeveloper of hypersonic missiles, satellite technologies and newer generation ballistic armaments, according\u2063 to missile experts \u2013 three areas of keen interest \u200dto North Korea since it\u2062 embarked on its mission \u2063to create an Intercontinental Ballistic Missile (ICBM)\u2064 capable of striking the mainland United States.<\/p>\n<p>According to \u2063technical data, the intrusion roughly began in\u200d late 2021 and\u2064 continued until May 2022 when, according to internal communications\u200d at the company reviewed\u2063 by Reuters, IT engineers detected the hackers\u2019 \u2063activity.<\/p>\n<p>NPO Mash grew to prominence during \u2062the Cold War as \u200da premier satellite maker for \u200dRussia\u2019s\u2062 space programme and as a provider of cruise missiles.<\/p>\n<h3>Email Hack<\/h3>\n<p>The hackers dug into the\u200b company\u2019s IT environment,\u200d giving them the ability to\u2064 read email\u2063 traffic, jump between networks, and\u200b extract \u200ddata, according to Tom Hegel, a security researcher with U.S. cybersecurity firm\u200b SentinelOne, who initially discovered the compromise.<\/p>\n<p>\u201cThese findings provide rare insight into the clandestine cyber operations\u200b that traditionally remain \u200bconcealed from \u200bpublic scrutiny or are simply never\u200b caught by such victims,\u201d Hegel \u200dsaid.<\/p>\n<p>Hegel\u2019s team of security analysts \u200cat SentinelOne\u200d learned of \u200bthe \u200chack \u2063after discovering that an NPO Mash \u200dIT staffer accidentally leaked his company\u2019s internal communications while attempting to\u2062 investigate the North Korean attack by uploading evidence to a private portal \u200cused by cybersecurity\u200c researchers worldwide.<\/p>\n<p>When contacted by Reuters,\u2063 that\u200b IT staffer declined to \u2062comment.<\/p>\n<p>The lapse provided Reuters and SentinelOne\u200b with a unique snapshot into a company of critical importance to \u200bthe \u2063Russian state\u2063 which \u2062was sanctioned by the\u2062 Obama\u200d administration following the invasion of Crimea.<\/p>\n<p>Two independent computer\u2062 security experts,\u200c Nicholas Weaver and Matt Tait, \u2062reviewed the exposed email \u2064content\u2064 and confirmed its authenticity. The analysts verified the connection by\u2063 checking the email\u2019s cryptographic signatures against\u200d a set of keys controlled by NPO Mash.<\/p>\n<p>\u201cI\u2019m highly confident the data\u2019s authentic,\u201d Weaver told Reuters. \u201cHow the information was exposed was an absolutely hilarious screwup\u201d.<\/p>\n<p>SentinelOne said they\u2064 were confident North Korea was behind \u2063the hack because the cyber\u200c spies re-used \u2064previously known\u200d malware and malicious infrastructure set up to carry out\u200d other \u200bintrusions.<\/p>\n<p>\u2018MOVIE STUFF\u2019<\/p>\n<p>In 2019, Russian President \u2064Vladimir \u2064Putin touted NPO Mash\u2019s \u201cZircon\u201d hypersonic missile as a \u201cpromising new product\u201d, capable of travelling at around nine times \u200dthe speed\u2064 of \u2064sound. <\/p>\n<p>The fact North Korean hackers may have obtained information about the Zircon does not mean they would immediately have that same \u200dcapability, said Markus Schiller, a\u2064 Europe-based missile expert who has\u200d researched foreign aid to North\u200d Korea\u2019s missile programme.<\/p>\n<p>\u201cThat\u2019s movie \u200cstuff,\u201d he\u2063 said. \u201cGetting plans \u200bwon\u2019t help\u2064 you much in building\u2064 these\u2064 things, there is a lot more to it than some drawings\u201d.<\/p>\n<p>However, given \u200bNPO Mash\u2019s\u200b position \u200das a top \u200bRussian missile designer and producer, the company would be a valuable target, Schiller added.<\/p>\n<p>\u201cThere is much to\u200d learn from \u2062them,\u201d he said.<\/p>\n<p>Another area of\u2062 interest could be in the manufacturing process used by NPO Mash surrounding fuel, experts said. Last month, \u200bNorth Korea test-launched the Hwasong-18, the first of its \u2064ICBMs to use solid propellants.<\/p>\n<p>That\u200c fuelling method \u2062can allow\u200c for faster deployment of missiles during\u2064 war, because it does \u200cnot require\u2064 fuelling on\u200d a launchpad, making the\u200d missiles harder to track and destroy before blast-off.<\/p>\n<p>NPO Mash produces an\u200c ICBM dubbed the SS-19 which is fuelled\u200c in the factory and sealed shut, a process known as \u201campulisation\u201d that yields \u200da\u2064 similar strategic \u2063result.<\/p>\n<p>\u201cIt\u2019s hard to do because rocket propellant, especially the oxidiser, is \u2062very corrosive,\u201d said\u2063 Jeffrey Lewis, a missile researcher at\u2062 the James Martin Center for Nonproliferation Studies.<\/p>\n<p>\u201cNorth Korea announced that it\u2062 was doing\u2064 the\u2064 same\u2062 thing in late 2021. If NPO Mash had one useful thing for them, that would \u2063be top of my list,\u201d he added.<\/p>\n<\/p>\n<p>  (Reporting by James Pearson in London and Christopher Bing in Washington; editing by \u2064Chris Sanders and Alistair Bell)<\/p>\n<p><a href=\"https:\/\/www.oann.com\/uncategorized\/exclusive-north-korean-hackers-breached\/attachment\/north-korean-leader-kim-jong-un-and-russias-defense-minister\/\"><\/a><\/p>\n<\/p><\/div>\n<div class=\"entry-content\">\n<h3>This Week&#8217;s Major Headlines<\/h3>\n<p>This week\u2062 has been \u200bfilled with major \u2063headlines in the U.S. and around the world. One \u2064America\u2019s Rachel Acenas brings us the latest.<\/p>\n<\/p><\/div>\n<div class=\"entry-content\">\n<h3>Interview with Dr. Carole Lieberman<\/h3>\n<p>with\u200c Dr. Carole \u200dLieberman<\/p>\n<\/p><\/div>\n<div class=\"entry-content\">\n<h3>Interview with Tom MacDonald<\/h3>\n<p>with Tom MacDonald<\/p>\n<\/p><\/div>\n<div class=\"entry-content\">\n<h3>Interview with Gregory Angelo<\/h3>\n<p>with Gregory Angelo<\/p>\n<\/p><\/div>\n<div class=\"entry-content\">\n<h2>An Elite Group of North Korean Hackers\u200d Breached Russian Missile Developer<\/h2>\n<p>By James Pearson and Christopher Bing LONDON\/WASHINGTON (Reuters) \u2013 An elite group of North Korean\u2064 hackers secretly breached computer\u2064 networks at\u2062 a\u2026 <\/p>\n<\/p><\/div>\n<div class=\"entry-content\">\n<h2>Paytm\u2062 Chairman \u2064to Buy Stake in\u200c the Company<\/h2>\n<p>By VarunVyas Hebbalalu BENGALURU (Reuters) -Paytm\u200b Chairman Vijay Shekhar Sharma will buy a 10.<a href=\"https:\/\/www.conservativenewsdaily.net\/breaking-news\/toshiba-says-tender-offer-to-take-it-private-will-launch-on-tuesday\/\" title=\"Toshiba's private tender offer set to begin Tuesday.\">3% stake\u200d worth 8 million<\/a> in the firm he\u2026 <\/p>\n<\/p><\/div>\n<div class=\"entry-content\">\n<h2>Medieval Advances in Plough\u200c Didn&#8217;t Lift Europe&#8217;s Peasants Out \u2062of Poverty<\/h2>\n<p>By\u2063 Mark John\u200b (Reuters) \u2013 If medieval advances in the plough didn\u2019t lift Europe\u2019s \u2062peasants out \u2064of poverty, it was largely because\u2026 <\/p>\n<\/p><\/div>\n<div class=\"entry-content\">\n<h2>Germany&#8217;s OHB to Sell\u200d Minority \u200bStake\u2062 to U.S. Investor KKR<\/h2>\n<p>By Alexander\u2063 H\u00fcbner BERLIN (Reuters) -Germany\u2019s OHB\u200c on Monday said U.S. financial investor \u200bKKR was \u2063buying a minority stake in the space\u2026 <\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>hackers infiltrated the computer networks of a prominent Russian missile developer for a minimum of five months in 2020. Security researchers and technical evidence reviewed by Reuters confirm this covert operation.<\/p>\n","protected":false},"author":66,"featured_media":1992893,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mo_disable_npp":"","fifu_image_url":"https:\/\/cndimages.nyc3.digitaloceanspaces.com\/breaking-news\/wp-content\/uploads\/2021\/01\/IMG_2758-scaled-1.jpg","fifu_image_alt":"","footnotes":""},"categories":[542],"tags":[],"class_list":["post-1992892","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-oann"],"fifu_image_url":"https:\/\/cndimages.nyc3.digitaloceanspaces.com\/breaking-news\/wp-content\/uploads\/2021\/01\/IMG_2758-scaled-1.jpg","_links":{"self":[{"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/posts\/1992892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/users\/66"}],"replies":[{"embeddable":true,"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/comments?post=1992892"}],"version-history":[{"count":0,"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/posts\/1992892\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/media\/1992893"}],"wp:attachment":[{"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/media?parent=1992892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/categories?post=1992892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.conservativenewsdaily.net\/breaking-news\/wp-json\/wp\/v2\/tags?post=1992892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}