Hacker News Reader

For CVEs? No. CVEs are awarded for things as (relatively) little as static keys being packaged with APKs.

What is unusual is that NK used a sophisticated attack chain to successfully pwn a hardened industry (notably, fintech).

At this point I think it’s safe to say that NK is a significant competitor to FVEY in terms of cyber warfare capabilities.

View on HN

I would say this isn’t necessarily unusual for NK. As far as I know, they’re the only nation state actor known to hack for profit and they’ve committed several of the largest cyber bank robberies ever. Nation state actors have an _incredible_ amount of time, resources, and motivation.

Indeed. The amount of skill they've demonstrated as Lazarus (Lazarus Leaks (Vault 7), the Bangladesh Bank Heist, and Dark Seoul) is certainly notable and this seems to fit well within their MO.

Reply on news.ycombinator.com