NSA hacked North Korea in 2010 but still failed to spot Sony attack

Home News Security NSA hacked North Korea in 2010 but still failed to spot Sony attack The US had enough insight to blame North Korea. But will sceptics be convinced?

Share

The National Security Agency (NSA) failed to grasp the seriousness of North Koreas alleged November attack on Sony Pictures as it unfolded despite having penetrated the countrys networks as far back as 2010, a report by the New York Times has suggested.

Judging from the anonymous sources lined up by the newspaper as well as a short Der Spiegel document released from Edward Snowdens cache, the US program was fairly successful at burrowing into the North Korea s cyber-systems from about four years ago, detecting the Chinese and Malaysian networks used by its expanding cyber-army.

From the Spiegel document, it appears that both the US and South Korea were able to implant malware on the mailboxes of specific North Korean officials. The US even detected and hijacked a third-party campaign (most likely by China) that hacked North Korea with great success using a zero day flaw.

As to how the US used intelligence gathered during this period to trace the Sony attacks to North Korea only after the fact, the New York Times is tantalisingly vague. Again, we hit the usual wall.

Fearing the exposure of its methods in a country that remains a black hole for intelligence gathering, American officials have declined to talk publicly about the role the technology played in Washingtons assessment that the North Korean government had ordered the attack on Sony, said the NYT.

Why didnt the US spot the attacks in advance if they had broken into North Koreas systems? In fact it appears they did to some extent but underestimated their seriousness. For instance, the NSA did not know that the attackers had used a spear phishing attack to successfully gain access to the admin account needed to do much of the damage.

The attackers spent two months from mid-September to mid-November roaming around the firms network, plotting their destructive attack in more detail, the newspaper briefings said.

The US even put a name to the Sony attack - Reconnaissance General Bureau commander, Kim Yong-chol, who allegedly oversaw the attacks.

Read more:
NSA hacked North Korea in 2010 but still failed to spot Sony attack