Malware News Is WannaCry linked to the Lazarus Group?

[Winter Soldier]

As last Friday’s WannaCry (WannaCrypt) ransomware attack continues to cause ripples around the globe, links have emerged between the malware code and the infamous Lazarus Group.

Lazarus is the group responsible for attacks on the Bangladesh Central Bank last year, Sony Pictures Entertainment in 2014, and more financial attacks in at least 18 countries.

Yesterday, a Google researcher, Neel Mehta, posted a code sample on Twitter that hints at a similarity between WannaCrypt and malware samples used by Lazarus in 2015.

Researchers at Kaspersky Lab‘s GReAT team analyzed the information and identified and confirmed clear code similarities between the malware samples. However, they point out that this could be a false flag operation, intended to divert suspicion from the real perpetrators.

Although this similarity alone doesn’t show proof of a strong connection between the WannaCry ransomware and the Lazarus Group, it could lead to other links that would shed light on the origins of WannaCry, which at the moment remain a mystery.

There’s more detailed information on the research on the Kaspersky SecureList blog.

 

[ElectricSheep]

Who knows who is responsible for it. But there's certainly a lot of finger pointing going on with all these groups blaming each other for it!

M$ blaming CIA for stockpiling.
CIA blaming M$ for backdoor.
The list just goes on and on and it's too early to try think of more

 

[Winter Soldier]

Who knows who is responsible for it. But there's certainly a lot of finger pointing going on with all these groups blaming each other for it!

M$ blaming CIA for stockpiling.
CIA blaming M$ for backdoor.
The list just goes on and on and it's too early to try think of more

Good point buddy and we are into the mess!

 

[cruelsister]

I can't believe Kaspersky would chime in on this at all. Those that code know that there are certain shortcuts/tweaks/paroxysms that one finds in code that can be almost like a specific accent. I know this to be true as colleagues have said that even a Blind Script-Kiddie could see my hallmarks.

The Kill malware used against the Ukrainian infrastructure showed these hallmarks. Not saying who, but...

Anyway I saw the group responsible for Wanna threatens to start an Exploit a Month club. If they are only out for cash they could do better financially by selling the exploit to the Vendor (right, Endgame?), and if they are out just to cause mayhem they wouldn't market this stuff at all.

Personally I think they are just a bunch of Chumps who got lucky:

"Life is but a walking shadow, a poor player
That struts and frets his hour upon the stage
And then is heard no more: it is a tale
Told by an idiot, full of sound and fury,
Signifying nothing."

 

[_CyberGhosT_]

They may have gotten their hands on the latest Pirates Of The Caribbean film too.
at least someone did, and the timing suggests it may have got caught up in the WannaCry
wave ?
New 'Pirates of the Caribbean' stolen by hackers

 

[frogboy]

Never a dull moment around here lately. Always someone is stealing something from someone.

 

[509322]

When it comes to IT security speculation and hyperbole, these guys display the right attitude:

Three Stooge Media Hype LLC

"We'll get it right for you..."

 

[Myriad]

Personally I think they are just a bunch of Chumps who got lucky:

Yes indeed sister ....

I've been thinking the same way since the weekend , even more so since I saw yesterday's posts in the parallel thread here ,
and the chump-change they appear to have made from their efforts .

There is something fishy and off-kilter about this recent episode , no doubt .
The Lazarus group were way more slick .... Sony were left standing there with their " pants pulled down " , for all to see ,
and no "smoking gun" either .

My apologies for recklessly mixing my metaphors ....

 

[Windows Defender Shill]

These idiots are taking on global super powers

Their days are numbered

They better hope they don't end up in a US or Russian prison.

 

[ElectricSheep]

Interesting little read...
What you need to know about the WannaCry Ransomware