Sunday , December 22 2024
UNODC

UNDOC Report
Group reportedly link to Bangladesh Bank cyber attack still active in Asia

North Korean hackers are sharing money-laundering and underground banking networks with fraudsters and drug traffickers in Southeast Asia, according to a United Nations report published on Monday, with casinos and crypto exchanges emerging as key venues for organized crime.

The United Nations Office of Drugs and Crime (UNODC) said without elaborating it had observed “several instances” of such sharing in the Mekong area – which includes Myanmar, Thailand, Laos and Cambodia – by hackers including North Korea’s Lazarus Group.

Eight New ICS Advisories released by CISA

CISA has released eight advisories on vulnerabilities in Industrial Control Systems (ICS). These vulnerabilities affect essential software and hardware in...
Read More
Eight New ICS Advisories released by CISA

Authority Denies
Hacker claim ransomware attack on Indonesia’s state bank BRI

Bank Rakyat Indonesia (BRI), the largest state bank by assets, has assured customers that their data and funds are secure...
Read More
Authority Denies  Hacker claim ransomware attack on Indonesia’s state bank BRI

London-based company “Builder.ai” reportedly exposed 1.2 TB data

Cybersecurity researcher Jeremiah Fowler reported to Website Planet that he found a non-password-protected 1.2 TB dataset containing over 3 million...
Read More
London-based company “Builder.ai” reportedly exposed 1.2 TB data

(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
Sophos resolved 3 critical vulnerabilities in Firewall

Sophos has fixed three separate security vulnerabilities in Sophos Firewall.  The vulnerabilities CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729 present major risks, such...
Read More
(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)  Sophos resolved 3 critical vulnerabilities in Firewall

“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA

A time-demanding workshop on "Cybersecurity Awareness and Needs Analysis" was held on Thursday (December 19) at Bangladesh Bank Training Academy...
Read More
“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA

CVE-2023-48788
Kaspersky reveals active exploitation of Fortinet Vulnerability

Kaspersky's Global Emergency Response Team (GERT) found that attackers are exploiting a patched SQL injection vulnerability (CVE-2023-48788) in Fortinet FortiClient...
Read More
CVE-2023-48788  Kaspersky reveals active exploitation of Fortinet Vulnerability

U.S. Weighs Ban on Chinese-Made Router TP-Link: WSJ reports

The US government is considering banning a well-known brand of Chinese-made home internet routers TP-Link due to concerns that they...
Read More
U.S. Weighs Ban on Chinese-Made Router TP-Link:  WSJ reports

Daily Security Update Dated: 18.12.2024

Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so...
Read More
Daily Security Update Dated: 18.12.2024

CISA released best practices to secure Microsoft 365 Cloud environments

CISA has issued Binding Operational Directive (BOD) 25-01, requiring federal civilian agencies to improve the security of their Microsoft 365...
Read More
CISA released best practices to secure Microsoft 365 Cloud environments

Data breach! Ireland fines Meta $264 million, Australia $50m

The Irish Data Protection Commission fined Meta €251 million ($263.6 million) for GDPR violations related to a 2018 data breach...
Read More
Data breach! Ireland fines Meta $264 million, Australia $50m

The UNODC said it had identified the activity via analysis of case information and blockchain data.

Contacted by phone about the UNODC report, a person at North Korea’s mission to the United Nations in Geneva said, without giving his name, that he was “not familiar with the issue” and that previous reporting on Lazarus was “all speculation and misinformation”.

Lazarus, which the United States has said is controlled by North Korea’s primary intelligence bureau, has been accused of involvement in a string of high-profile cyberheists and ransomware attacks. Funds stolen by North Korean hackers are a key source of funding for Pyongyang and its weapons programmes.

The UNODC report said Southeast Asia’s casinos and junkets, which facilitate gambling by high-wealth players, as well as unregulated cryptocurrency exchanges, have become “foundational pieces” of the banking architecture used by organized crime in the region.

Casinos have proven “capable and efficient in moving and laundering massive volumes” of crypto and traditional cash undetected, it said, “creating channels for effectively integrating billions in criminal proceeds into the formal financial system.”

The junket sector has been infiltrated by organized crime for “industrial-scale money laundering and underground banking operations,” with links to drug trafficking and cyberfraud, the report said.

It cited licensed casinos and junket operators in the Philippines which helped launder around $81 million stolen in a cyber-attack on Bangladesh’s Central Bank in 2016, which was attributed to the Lazarus Group.

The proliferation of casinos and crypto have “supercharged” organized crime groups in Southeast Asia, UNODC Regional Representative for Southeast Asia and the Pacific Jeremy Douglas told Reuters.

“It’s no surprise sophisticated threat actors would look to leverage the same underground banking systems and service providers,” he said.

Source: Reuters

Check Also

Telecom Namibia

Over 4 lac files ‘leaked’: Telecom Namibia hit by major cyberattack

Telecom Namibia experienced a cyber incident that leaked customer data. The company is working with …

Leave a Reply

Your email address will not be published. Required fields are marked *