North Korea's Cyber Operations with Mandiant's Michael Barnhart

Cyber Focus

In this episode of Cyber Focus, host Frank Cilluffo sits down with Michael Barnhart, who leads North Korean operations at Mandiant. The discussion delves into the activities of APT 45, a North Korean cyber group responsible for an array of global cyber attacks. The conversation explores how APT 45 operates like a criminal syndicate, focusing on their ability to exploit vulnerabilities at speed, the role of insider threats, and their targeting of critical infrastructure. Barnhart highlights the importance of understanding North Korea’s cyber strategies and the broader implications for global security.
Main Topics:

• APT 45's Role and Operations
• North Korea’s Cyber Strategies
• Targeting Critical Infrastructure
• Insider Threats and IT Workers
• Global Implications

Key Quotes:
"We don't really see them as a government regime as much as we see them as a cyber crime, a single single mafia family." - Michael Barnhart
"Traditionally organized crime types tries to penetrate the state. In North Korea's case, it's the state penetrating organized crime." - Frank Cilluffo
"This is a country that definitely doesn't want you to pay attention to them. They operate [by] being underestimated. They like that." - Michael Barnhart
"Has north korea put an insider threat someplace? Yeah, we're seeing it now. Will they push the button? I think in a moment of conflict we might try to see insider threats doing destructive attacks on the inside." - Michael Barnhart
"These missiles were blowing up in the launch pad years ago now. They're doing so well that they're selling them to other countries." - Michael Barnhart
Guest Bio:
Michael (Barni) Barnhart is the lead for all of DPRK operations within Mandiant. He's spent 19 years as an intelligence professional, starting with Human Intelligence collection doing tactical raids, interrogations, and source operations with regular Army and Special operations.
Related Links:

• https://cloud.google.com/blog/topics/threat-intelligence/apt45-north-korea-digital-military-machine
• https://www.mandiant.com/resources/insights/apt-groups
• https://www.justice.gov/opa/pr/north-korean-government-hacker-charged-involvement-ransomware-attacks-targeting-us-hospitals