The US sees North Korea behind 'WannaCry' cyber attack

Private security analysts say "Lazarus" group of hackers linked to North Korea are also likely behind a series of multimillion-dollar cyber thefts from banks around the world.

A screenshot shows a WannaCry ransomware demand, provided by cyber security firm Symantec, in Mountain View, California, US May 15, 2017.
Reuters

A screenshot shows a WannaCry ransomware demand, provided by cyber security firm Symantec, in Mountain View, California, US May 15, 2017.

The Trump administration is expected on Tuesday to publicly blame North Korea for unleashing a cyber attack that crippled hospitals, banks and other companies across the globe earlier this year, according to Reuters.

The accusation that the North Korean government was behind the so-called WannaCry attack comes as worries mount about North Korea's hacking capabilities and its nuclear weapons programme.

The US government has assessed with a "very high level of confidence" that a hacking entity known as Lazarus Group, which works on behalf of the North Korean government, carried out the WannaCry attack, a senior administration official said. 

The White House did not immediately respond to a request for comment.

The public condemnation will not include any indictments or name specific individuals, the official said. But the shaming is designed to hold North Korea accountable for its actions and "erode and undercut their ability to launch attacks," the official said.

North Korean government representatives could not be immediately reached for comment. The country has repeatedly denied responsibility for WannaCry and called other allegations about cyber attacks a smear campaign.

Lazarus Group is widely believed by security researchers and US officials to have been responsible for the 2014 hack of Sony Pictures Entertainment, which destroyed files, leaked corporate communications online and led to the departure of several top studio executives.

Sony also suspended the release of a comedy film that portrayed North Korea's ruler, Kim Jong Un, because of threats issued by the hackers.

Then-US President Barack Obama condemned Pyongyang for the Sony hack, vowing at the time to "respond proportionally." No indictments have been brought in the Sony case.

Many security researchers, including the cyber-firm Symantec, as well as the British government, have already concluded that North Korea was likely behind the WannaCry attack, which quickly unfurled across the globe in May to infect more than 300,000 computers in 150 countries.

Considered unprecedented in scale at the time, WannaCry knocked British hospitals offline, forcing thousands of patients to reschedule appointments and disrupted infrastructure and businesses around the world.

The attack originally looked like a ransomware campaign, where hackers encrypt a targeted computer and demand payment to recover files. Some experts later concluded the ransom threat may have been a distraction intended to disguise a more destructive intent.

FedEx's computer networks were among the most heavily hit. The international shipper said in September it expected to sustain a $300 million profit hit as a result of the attack.

Route 6