Hackers expose North Korean spy’s data, revealing intel on a secret group: All the details

Cybersecurity

Two hackers identified by the code names ‘Saber’ and ‘cyber0rg’ have claimed to have compromised the computer of a North Korean government hacker and leaked its contents online. With this breach, the hackers have stolen and leaked 8.9 GB of secret files from North Korea, including emails, passwords, and documents exposing links to Chinese hackers.

Both hackers have published a report about this breach in the latest issue of Phrack magazine, which is a legendary cybersecurity online publication. In the article, the two hackers wrote that they were able to compromise a North Korean workstation containing a virtual machine and a virtual private server of a group called Kimsuky.

Kimsuky is said to be both a government intelligence-gathering network and a criminal enterprise, which steals and launders cryptocurrency. With this breach of the North Korean network, the hackers have added that it shows a glimpse of how openly Kimsuky cooperates “with the Chinese government and shares their tools and techniques.” Moreover, with the breach, hackers have reportedly recovered an 8.9GB data dump, now hosted on the Distributed Denial of Secrets (DDoSecrets) website.

This leaked data reportedly contains browser histories linking to suspicious GitHub profiles, records of VPN service purchases, visits to hacking forums, and sensitive information of Taiwanese government sites. Also among the recovered data was the complete source code for Kebi, the South Korean Ministry of Foreign Affairs’ official email platform. However, with this major data breach, experts believe that Kimsuky’s operations may be temporarily halted for a brief period of time.