October 21, 2021
New Rule From US Commerce May Help Limit Spread of North Korean Cybercrime
The U.S. Commerce Department recently announced a new rule barring the export and resale of cyber “intrusion software” and equipment to China and Russia without a proper license from the U.S. Bureau of Industry and Security (BIS). It will apply to any intrusion software, including defensive products, being sold to any Chinese or Russian person regardless of whether they are affiliated with the government or not. Set to come into effect in 90 days, the rule will likely impact the operations of not only Chinese and Russian cybercriminals, but also the North Korean Lazarus Group, which conducts offensive cyber operations against foreign states, often with the assistance of Chinese or Russian groups.
As sanctions tighten in other areas, such as the commodities trade, North Korea continues to compensate for its monetary losses with funds obtained through illicit cyber activity.
While intrusion software is critical for penetration testing, which allows cybersecurity analysts to discover and patch existing system vulnerabilities, malicious actors have leveraged the sale and distribution of such technology to proliferate global cybercrimes. North Korea, in particular, has successfully incorporated cyber-enabled financial crime within its proliferation finance modus operandi for years as it provides an inexpensive and low-risk way to evade U.S. and U.N. economic sanctions. As sanctions tighten in other areas, such as the commodities trade, North Korea continues to compensate for its monetary losses with funds obtained through illicit cyber activity. These money-generating attacks range from basic data breaching tactics such as email phishing to more advanced forms of cyber-enabled financial crime including online bank heists, hacking of cryptocurrency transactions, and distributing ransomware.
Read the full article from The Diplomat.
More from CNAS
-
Richard Nephew on the U.S. military strikes on Iran’s nuclear program
Richard Nephew, expert on sanctions and Iran’s nuclear program, joins Emily and Geoff to discuss the long history of U.S. policy towards Iran, the role of sanctions in constra...
By Emily Kilcrease & Geoffrey Gertz
-
Energy, Economics & Security / Technology & National Security
Beyond Bans: Expanding the Policy Options for Tech-Security ThreatsStuck between a rock (the fact that banning all Chinese tech that poses a risk is expensive and impractical) and a hard place (the fact that many existing mitigation proposals...
By Geoffrey Gertz
-
Indo-Pacific Security / Energy, Economics & Security
75 Years Post-Korean War: Can Trust Be Rebuilt Under the New Administration?As President Lee Jae Myung begins his term, he's taking visible steps to reset the tone with North Korea: halting propaganda broadcasts and reemphasizing past military agreeme...
By Dr. Go Myong-Hyun
-
Middle East Security / Energy, Economics & Security
Will Iran block the Strait of Hormuz?The world has held a close eye on the Strait of Hormuz lately with Israeli and U.S. strikes on Iran. Nearly a quarter of the world's seaborne oil passes through the narrow wat...
By Rachel Ziemba