NEWS
Cybereason researchers uncover North Korean APT operation targeting public and private sector
Cybersecurity company Cybereason has announced that the Cybereason Nocturnus Team has identified a newly discovered modular spyware suite dubbed KGH _ SPY and a new malware strain named CSPY Downloader .
The company says they are being employed in attacks by cyber espionage group Kimsuky – believed to be operating on behalf of the North Korean regime .
This APT group has been observed targeting victims that include public and private sector companies in the US , Europe , Japan , South Korea and Russia . The target organizations include pharmaceutical and research companies working on COVID-19 therapies , government and defense organizations , journalists and human rights groups .
The KGH _ SPY suite infection vector appears to be by way of Word documents containing malicious macros and the malware includes several components used to harvest information , run arbitrary commands and spy on the user activities by way of a keylogger and a backdoor component . Some of the components of the KGH Spyware suite remain undetected by antivirus vendors .
Assaf Dahan , Senior Director , Head of Threat Research , Cybereason , said : “ Since the malware is quite new , the true scope of the threat it poses is unknown , but given Kimsuky ’ s track record this spyware is likely to be of serious concern to both public and private sector organizations .”
AIA Thailand partners with Amdocs to further enhance customer data security
Amdocs , a leading provider of software and services to communications and media companies , has announced an agreement with AIA Thailand , a part of AIA Group , an independent publicly listed pan- Asian life insurance group , to implement the Amdocs DataONE privacy solution . To ensure privacy even while working remotely during COVID-19 , the solution will enable users to have access control within application and database , consent to enforcement and user behavior analytics .
According to the agreement , Amdocs DataONE will work with the SecuPi dataprotection platform to implement the privacy solution for AIA Thailand . The implementation will help enable AIA to meet regulations around data protection ( PDPA ). The innovative technology will allow the implementation of the solution without requiring AIA to make any changes to its application or existing backend system .
“ Data Privacy is a critical need across all industries , also due to increased regulations in data privacy and the new normal of remote working . The trust and confidence placed by our customers to properly handle their information makes it imperative for us to meet their expectations ,” said Kitti
Manakongtreecheep , Chief Technology Officer of AIA Thailand .
“ We are pleased to partner with Amdocs , who have offered to provide innovative data privacy solutions identifying the needs and regulatory changes in Thailand for our customers .” www . intelligentcio . com INTELLIGENTCIO
9