Microsoft Corp has taken control of web domains which were used by a hacking group called "Thallium" to steal information. Thallium is believed to be operating from North Korea, Microsoft said in a blog post, and the hackers targeted government employees, think tanks, university staff members and individuals working on nuclear proliferation issues, among others. Most of the targets were based in the United States, as well as Japan and South Korea, the company said. Thallium tricked victims through a technique known as "spear phishing", using credible-looking emails that appear legitimate at first glance. Thallium also used malware to compromise systems and steal data, and is the fourth nation-state group against which Microsoft has taken legal action, the company said.
Source: Otago Daily Times December 30, 2019 23:37 UTC