Jaku botnet targets engineers, scientists and academics – and likely comes from North Korea
Security researchers have discovered that an ongoing botnet campaign is specifically targeting scientists, academics, engineering firm employees, government employees and members of international non-governmental organisations (NGO).
Forcepoint Security Labs says in its latest report that the Jaku botnet has so far claimed an estimated 19,000 unique victims, 42% of which are located in South Korea, while 31% are located in Japan, 9% in China and 6% in US. The remaining 12% are located in 130 other countries.
IP addresses are controlled within groupings known as routing domains, which are identified by Autonomous System Numbers (ASN). When the researchers looked up the corresponding ASNs, they realised that 14% of the victims were using internet provided by Korea Telecom, followed by 8% by SK Broadband, 8.4% by LG Uplus Corp – all South Korean network providers.
