McAfee casts doubt on Ryuk ransomware connection to North Korea
Security researchers with McAfee have released a report in which they argue that the recent Ryuk ransomware attack on Tribune Publishing Co., which disrupted the distribution of various major US newspapers, was not carried out by North Korean hackers, as various media outlets have claimed.
According to the report, the threat actors behind the attack were likely cybercriminals with no specific government affiliation. The report did not cover the recent cyberattack on cloud service provider Data Resolution. In that case the targeted company also mentioned the use of Ryuk ransomware, while pointing the finger at North Korea.