NHS cyber-attack came from North Korea

The BBC has learned that British security officials believe the cyber-attack which paralysed parts of the NHS and other global organisations last month came from North Korea.

The investigation was led by Britain’s National Cyber Security Centre (NCSC). Security sources have told the BBC that the NCSC believes that the hacking group Lazarus initiated the attack. The same group is also thought to have targeted Sony Pictures in 2014.

Adrian Nish, who leads the cyber threat intelligence team at BAE Systems, found links between codes used before by Lazarus with these ones, saying: “It seems to tie back to the same code-base and the same authors. The code-overlaps are significant.”

Please register to comment on this article