Hacker News Reader

How did they determine the threat is coming from North Korea?

From the article: "The shellcode used in this exploit is constructed in a similar manner to shellcode observed in previous North Korean exploits."

Got it. Missed that part. Thank you. Looks like a pure assumption. According to CyberProof [1] and CloudFlare [2], the majority of attacks originate from China and the United States. North Korea is not even making it to Top 10. That's why I asked.

[1] https://blog.cyberproof.com/blog/which-countries-are-most-da...

[2] https://blog.cloudflare.com/ddos-attack-trends-for-2021-q4/

North Korea is a nice foil, because then you don't have to cast aspersions onto trading partners.

"Look, see? NK. We even copied some Korean words into the comments."

Isn't NK a small china protectorate anyways?

The NK government-backed hacker groups mostly operate in China.

Someone of you may enjoy this[0] podcast on the North Korean Lazarus Group.

[0] https://www.bbc.co.uk/programmes/w13xtvg9/episodes/downloads

Are we supposed to download this and run on our computers?

The podcast seems to be available on Spotify and similar.

Reply on news.ycombinator.com