NHS computer hacks traced to North Korea

THE Wannacry ransomware attack that affected more than 150 countries and crippled parts of the NHS came from North Korea, security sources believe.

The attack affected computers at more than 60 NHS trusts and an estimated 300,000 people worldwide, by locking data and demanding money to release it again.

British cyber experts analysing the software worm believe it was created by a prolific North Korean cyber gang called the Lazarus Group.

British security sources said it was unclear if the attack had been ordered or sanctioned by the Pyongyang government, but an assessment by America’s National Security Agency (NSA) said it had “moderate confidence” the attack pointed to North Korea’s spy agency, the Reconnaissance General Bureau, the Washington Post reported.

The NSA believes the ransomware was an online extortion attempt to raise cash for Pyongyang’s coffers.

However, the attempt was apparently flawed and although the hackers raised more than £100,000 in ransom payments of digital currency, the money has not been cashed in because the accounts could be easily tracked by law enforcement officials.

Cyber security experts have said North Korea’s cyber crime efforts are becoming increasingly bold, and the cash-strapped regime is believed to have launched a string of digital bank raids.

The Russian cyber security firm Kaspersky earlier this year said North Korea was linked to attempted cyber heists in 18 countries, mainly in Asia and Africa.