that may be what led them to look at lazarus.arus is the group out of north korea that was linked to the major hack of sony pictures in 2014 after sony pictures produced a spoof film about north korea. lazarus has also been linked to cyber attacks on banks around the world. right here in south korea, officials aren't pointing to north korea. they say this is still the beginning of the investigation into who is behind this attack, but dave, defense officials here have in the past said that north korea is responsible for at least ten cyber plots in just the last decade alone. and defense officials here believe that north korea continues to build up its capacity to carry out cyber attacks. they say that the cyber attack team inside north korea is 6,800 people strong. dave? >> wow. and more than 300,000 worldwide users impacted by that cyber attack. alex, thank you. >>> all right, desperate attempts to contain the world's biggest cyber attack appear to be working. the infection did not spread as much as law enforcement expected yeste

analysis and there were some matches that show that this could be developed by the lazarus group. the group which according to some data has caused serious attacks to financial organizations around the globe. they also say the algorithms could reach entire systems were once similar to u.s. security services. while victims dry their eyes, the attacks have boosted cyber security stops. governments and corporations will spend more to upgrade their defenses. >> we're talking a security breach now. >> disney has become the victim of a cyber attack. hackers claim to have stolen one of disney possibly movies. quite possibly pirates of the caribbean. they are asking for a huge ransom in bitcoin. disney management says they refuse to hand over the plunder to movie pirates. >> our correspondent is following this from wall street. how serious is this for tuesday? just for the very fact that their supply chain is compromised? >> it is concerning. even if the thumb studio -- each of those movies, pirates of the caribbean, they are supposed to be bringing in more than $500 million. if the movie

lazarus is thought to be the cyber attack group of the north korean government. this is not the first time the toe has come up in relation cyber attacks. south korea blamed its neighbor for a 2013 attack on it banks. and in 2014, u.s. intelligence said they suspected the attack on sony pictures to have originated from lazarus in north korea. similar suspicions arose when the bangladesh they was hacked in february. unclear what their ultimate motivation here is. but it's certainly pretty clear that this is not the kind of thing a very professional cyber criminal would do. guys who are involved in this type of scheme like to run just under the radar. reporter: with no definitive remainet, experts cautious. it could be called a cop false flag -- could be called a false flag. william: an award-winning mexican journalist who was shot dead outside his office was known for his coverage of the drug trade. back in 2011 he won the international press freedom award from the committee to protect journalists. he was the fifth journalist killed in mexico this year alone. in se

was used by the lazarus group a few years ago.ou may not have heard of them, but they are best known, their notoriety if you like is that they we re notoriety if you like is that they were supposed to be behind the sony pictures hack, which was massive in 2014. they have links to north korea. north korea of course has denied all of this. there are other clues that might suggest other things. another expert is saying the way that the ransomware demand was written, the one that was written in chinese felt like the miz in terms of the tone of the language. perhaps it was somebody either in china or from china. there are all sorts of theories bouncing about. another thing that everybody wants to do is follow the money. all of this money has gone into these three bitcoin wallets a nd has gone into these three bitcoin wallets and it has not been touched. the eyes of the world on these wallets. who is going to take that money out? the way that bitcoin is set up, there is no easy way to know who has access to those wallets. set up, there

wannacry" code. >> some fragments or snippets or pieces of the technology was definitely linked to a lazarus group who were implicated in the 80-plus million dollars that was taken in a bank heist in bangladesh and the sony pictures thing which definitely has a tie to north korea. >> reporter: although clark is quick to point out that the evidence so far is not conclusive and it could be fake. >> it's like a bank robber who leaves fake fingerprints around to blame someone else. that's a theory. >> reporter: this particular hack doesn't affect mac computers but it is still alive and well and may still hit people's pcs. no matter what kind of computer you use, stop ignoring and delaying those security patches. we have all been there. your system tells you, you need to install an update. you say you have to stop what you're doing and install it. in the newsroom, melissa caen, kpix 5. >>> still to come, an unusual overdose. >> a teenager goes on a caffeine binge and it kills him. a father's warning on energy drinks. >> plus, crashes between cars and those big trucks a simple fix that could save

>> yeah, when you think about the one that went down in bangladesh linked to lazarus group, that wasllion. made a few typos or it would have been a lot more money. usually we see ransomware inside of corporations having higher sticker price than $300. that is is the one thing that would indicate these guys may have known each other. they may have shared some code but there may be more to it. i think -- go ahead. liz: i want to jump in because the north koreans, they are sort of allied with maybe the russians, maybe the chinese, but both those countries had victims of this ransomware attack. when you think how they attacked sony back in the day a couple years ago over the movie "the interview" of the starring jonah hill. we remember what it did to a single business. as a business network this is extraordinarily damaging. >> this particular malware when that vulnerability was unleashed on internet, where it was going to go and what effect is sort of outside of the adversaries control and propagation of that worm. we think there is a case that somebody built it, put it out there, never

but the lazarus group might sound familiar to people, and that's because the lazarus group from northures back in 2014 when sony was putting out a spoof film about north korea, the interview. this is a group that has also been linked to attacks on banks worldwide. south korean officials were asked if they think that north korea is behind this. don't forget, they are closely monitoring north korea's cyber attack capabilities as best they can from this distance. they're not pointing fingers at north korea just yet. they are agreeing that this is an investigation that needs to unfold and that all possibilities need to be considered. but as i said, they do closely try and understand north korea's cyber attack capacity and capability. in the past, defense officials in this country have linked about ten different cyber plots to north korea, and they estimate that north korea now has about 6,800 people working on their cyber attack capabilities. dave? >> frightening. alexandra field live for us in seoul. thank you. >> let's get a check on "cnn money stream" this morning. u.s. futures and glo

it has been used before by lazarus back in february. this is the first time it's recognized. cyber investigations take a great deal of time. >> heather: people may be more familiar with the sony hacks. that was billions of dollars, but this is perhaps not a criminal group because not a lot of money is being made. >> that's right. a lot of the speculation is stunning from the fact that if these are criminals behind these attacks, they're not very good at crime, they're not making any money off of this. they're not keeping it quiet. all the law enforcement agencies are after them. the bottom line is they are not making any money. people are wondering what's the point of this? they want $50,000 total for ransom paid. however, how the speech 27 works as the files are encrypted, you pay for the key. they're not getting their files back. >> heather: overall, it's incredibly difficult to trace. >> were just at the beginning, it will take time. >> heather: you been working on this way before this. >> ransomware has been a huge growing threat. we've looking at this for months. ibm sai

. >> reporter: the last rutgers group is -- lazarus group is a hacker gang with ties to north korea. they discovered the signatures in the "wannacry" code. >> some fragments or snippets or pieces of the technology were definitely linked to a lazarus group who were implicated in the 80 plus million dollars that was taken in a bank heist in bangladesh and the sony pictures thing which has a tie to north korea. >> reporter: clark points out that the evidence so far is inconclusive. it could be fake. >> maybe it's like a bank robber that puts on a fake set of gloves with fingerprints on it leaves fingerprints around to frame someone else. that's definitely a thesis. >> reporter: if you get hacked, don't pay the ransom. >> just like in this case paying the ransom, you may not get your files unlocked. and they may just -- you never hear from them again. >> reporter: if you haven't yet been hacked. >> stop what you're doing and patch this vulnerability. make sure your detection technologies are up to scratch. go do that and then come back and turn the tv back on. >> reporter: in the newsroo

. >> reporter: the lazarus group is a group tied to north korea.ymantec discovered portions of its code in wannacry, the hack used in last week's attacks. lazarus was also implicated in the 2014 sony pictures data tack in apparent retaliation for its release ofhe and the theft of $81 million from a bangladesh account. u.s. officials blamed both hacks on north korea. the latest attack was widespread, forcing a shut down of hospitals and other businesses around the world. it exploited a known vulnerability in an older microsoft program, encrypting files to make them inaccessible until a ransom of $300 was paid. while technology experts were able to contain this weekend's attack, the threat is not yet over. >> we're worried about the smart guys realizing what worked, what didn't, and something else coming our way that might be a little bit better engineered after that happened. >> reporter: the european police agency says that roughly $63,000 have already been paid to the hackers by people with infected computers. now, experts say it's still too early

the canopy pilots are ian jenson and scott lazarus. this is cool.n they are ready to disemb k disembark, he peels off. then just as easily as they came together, they just release and the stunt is complete. >> nice work, fellas. >> they make it look so easy. >>> maybe about ten months until the oscars, but i have here two nominees for best actress. we're going to start from shanghai with woman in alley. oh! she's down! do you see that? >> where's the sniper? >> unbelievable displays of ac chops. seeing how the car is nowhere near. she's like, all right. i can do this. and just run for the car. bang on the front and then -- >> that's a lebron james flop right there. >> but she's right back up. i'm sure the definition would be she's hitting the car. >> she is trying it right now. >> the other car backs up. she's like not today. >> he's like what are you doing. >> she's a method actor, quite cheerily. >> the police officer walked off. >> as the officer comes back with more of a determined walk. she decides now is the time to -- you'd think that would b

>> in this case there was a flag fragment that was associated with lazarus. >> reporter: with ties to north korea and they discovered portions of mall ware codes in wannacry the program used in last week's cyber attacks. lazarus was also implicated in the 2014 sony pictures data hack an apparent retaliation for its release of the film "the interview" that mocked north korean leader kim jong-un and connected with last year's theft of $81 million from a bangladesh account at the federal reserve bank in new york. u.s. officials blamed both hacks on north korea. the latest attack was widespread. forcing a shutdown of hospitals and other businesses around the world. it exploited a known vulnerability in an older microsoft program encrypting files to make them inaccessible until a ransom of $300 was paid. while technology experts were able to contain this weekend's attack, the threat is not yet over. >> we're worried about the smart guys realizing what worked and what didn't, and something else coming our way that might be a little bit better engineered after that happened. >> reporter: the

they say part of the technology was associated with the lazarus group, a collective of hackers with known ties to north korea. >>> the man who fought off two teenagers on a metro platform is looking for the good samaritan who jumped in to break up the attack. john rowley suffered a broken hand, as well as facial swelling and bruising after friday evening's attack at gallery place metro. he later learned the man in his 20's who attends george washington law school helped fight off his attackers, taking blows himself. the hero did stay on the scene and was treated for his own injuries. disturbing, an officer was able to follow the teens and make arrests just a couple of stops away. >>> fire investigators are looking for a couple who live at a wharton townhouse that mysteriously caught fire last week. authorities want to talk to darren and donna hensman that broke out at their home. the home was in foreclosure and they claim they saw a man packing up shortly before the fire broke out. it is believed the couple is heading to texas or clear water florida. >>> bill cosby is publicly addressing

found between the software used in the hack and other tools believed to have been created by the lazaruse previously been associated with pyongyang. facebook is still available in thailand, despite a deadline passing for it to remove material the authorities had deemed critical of the monarchy. facebook was given until tuesday to take down 131 web addresses deemed to violate its strict law. authorities had threatened legal action and a complete shutdown of the social media site. disappointment for maria sharapova. the french tennis federation has denied the russian tennis star a wildcard invitation to next week's french open. the five—time grand slam champion came back from a fifteen—month doping ban in april, but did not have enough points to go straight into the main draw in paris or the qualifying event. jakarta's once hugely popular governor is being held in a simple room at a high—security detention centre, his only comforts — a bible and visitors twice a week. it's a grim new life following his conviction for insulting islam in muslim—majority indonesia. basuki tjahaja purnama was

some of the code used in the attacked the lab says has been run by north korea's linked lazarus groupt was behind the the sony attack. a man who received a standing ovation from the *. >> it's the largest employer in america having invested $23. >> million to create high-paying manufacturing jobs for mayor cans last 30 years. lou: australian billionaire anthony pratt is with me next on why he's praising mr. trump p p lou: in our online poll we asked you, do you believe it's impossible to get a fair trial in this hyper partisan sage? and 71% say yes, it's impossible. joining us now, australian billion air an thon asky pratt. he says his goal is to double america's pratt industry's high-paying jobs. you know, it's inspiring to see you make that kind of commitment to the country. and it's a great example for business leaders, domestic and foreign. >> it was a great honor before the president and the first lady announced we are investing $500 million in the midwest. lou: when i look at what's happening and compare, i want to know what you are thinking of what donald trump is going through

some of the code used in the attacked the lab says has been run by north korea's linked lazarus groups behind the the sony attack. a man who received a standing ovation from the *. >> it's the largest employer in america having invested $23. >> million to create high-paying manufacturing jobs for mayor cans last 30 years. lou: australian billionaire anthony pratt is with me next on why he's praising mr. trump and mr. trump's fair trade plans. ♪ you know how painful heartburn can be. for fast-acting, long-lasting relief, try doctor recommended gaviscon. it quickly neutralizes stomach acid and helps keep acid down for hours. relieve heartburn with fast- acting, long-lasting gaviscon. looking from a fresh perspective can make all the difference. it can provide what we call an unlock: a realization that often reveals a better path forward. at wells fargo, it's our expertise in finding this kind of insight that has lead us to become one of the largest investment and wealth management firms in the country. discover how we can help find your unlock. lou: in our online poll we asked you, do y

but some similarities with revis malware that has affected financial institutions from lazarus groupn found. you've seen the original code and i'm going to ask his question from the perspective of someone who is not familiar with the ins and outs of coding. be to tweakld it the original code now that we know what it is? or to tweak it and employ it again? >> sure. that's not necessarily easy, but it is doable. i was expanding attribution as a viable into the equation. analyzing the technical similarities is only one of them. so it's important to look at the big picture when pointing fingers for attribution. like i was saying before, there is similar is between the two programs. day, thesend of the hackers can do all they want. but on the defensive side, whose responsibility is it to make sure we are well prepared for the next one? does it come down to legislation or the tech guys that are writing all this code to make sure our computers are well defended? >> when you look at cybersecurity issues, which is often overlooked, every party is sharing responsibility. microsoft, not only cu

some of the code used in the attacked the lab says has been run by north korea's linked lazarus groupe sony attack. a man who received a standing ovation from the *. >> it's the largest employer in america having invested $23. >> million to create high-paying manufacturing jobs for mayor cans last 30 years. lou: australian billionaire anthony pratt is with me next on why he's praising mr. trump p p break through your allergies. try new flonase sensimist allergy relief instead of allergy pills. it delivers a gentle mist experience to help block six key inflammatory substances. most allergy pills only block one. new flonase sensimist changes everything. i count on my dell small for tech advice. with one phone call, i get products that suit my needs and i get back to business. ♪ ♪ ♪ here comes the fun with sea-doo. ♪ ♪ sea-doo has the most affordable watercraft on the market. starting at just $5,299 and get 0 percent financing. visit sea-doo.com today. looking from a fresh perspective can make all the difference. it can provide what we call an unlock: a realization that often reveals a b

the think the google guys found the lazarus group link which is tied to north korea. but i agree with mr. tran, this great difficulty following the code in this instance. this has been some of what an amateur hit. the whole concept or the whole idea of ran stop ware is to -- ransom ware is to raise money. it started from way understand, $50,000. david: the point here is that would be a cover, penal who suspect north korea would have used that money extortion threat as a cover for the real intent which was to hit us where we may have points geared their, cbm launches. >> if this was actually a ran tomorrow ware attack, these guys would be trying to get funds or extort money out of people. they haven't been delivering the codes. >> it was amateur hour. this a twitter bot out there that follows only three bitcoin wallets dpload there. that's suspicious. the current count is $71,000 u.s. dollars. david: if there is enough evidence to put the finger on north korea, how should we respond? >> this is a very, very tricky situation. you can have a number of situations and a co

some of the code used in the attacked the lab says has been run by north korea's linked lazarus groupthe the sony attack. a man who received a standing ovation from the *. >> it's the largest employer in america having invested $23. >> million to create high-paying manufacturing jobs for mayor cans last 30 years. lou: australian billionaire anthony pratt is with me next on anthony pratt is with me next on why he's praising mr. trump p p i'll never find a safe used car. anthony pratt is with me next on why he's praising mr. trump p p start at the new carfax.com show me minivans with no reported accidents. boom. love it. [struggles] show me the carfax. start your used car search at the all-new carfax.com. brtry new flonase sensimists. allergy relief instead of allergy pills. it delivers a gentle mist experience to help block six key inflammatory substances. most allergy pills only block one. new flonase sensimist changes everything. ostriches don't really stick their heads in the sand. a peanut is not a nut. and a real john deere... is actually real affordable. you learn something new e

researchers finding similarities between the latest attack and programs used by the north korean lazarusattack is thought to be behind the 2014 is execrable the network for weeks. security expert sounding the alarm that more cyberattacks are likely. >> switching gears some weather. some is about to show up on the east coast. >> it is all people are talking about, 90s in the northeast details two seasons, wintertime across the rockies and warm summertime heat, golf moisture and upper-level wind and threat for severe storms including tornadoes from texas all the way to the great lakes and there is that tornado threat danger through this evening from texas toward kansas, large hail, damaging winds and tornadoes as well and called side of the storm producing heavy snow across the rockies and interior northwest so that is a big story as well. we have weather advisories for dangerous travel across the mountain passes. there are your highs 80s to 90 ° towards new york was maybe a flirt with a 90 ° temperature. >> you are such a flirt. >> you know i love to flirt. >> it is 12 minutes after the t

this hour, i am pleased to say we will be speaking to mark --ius and mark lazarus he sry.ke to bring in julie hyman to tell us about the markets. julie: as you said,

this group that is associated with north korea is lazarus group, so it's not the north korean governmentt that was directed at them. no government response is going to be issued whether a statement form or any other response until they absolutely know. also, this wasn't a phishing attack which is normally where you get an e-mail. click random infected leg. this is a different debris of entry. they think possibly someone took a computer into an area where there is a public network like a hotel lobby for starbucks coffee shop and it was effective that way. that makes it more difficult to understand your patient zero is. until they find beneficial, there can't be an official government. nicole: have been talking about north korea being behind the attacks years ago. just a remember, sony was about to put out a moving interview about their leader, kim jong un. >> fine movie by the way. lauren: between this and missile tests at her missile tests, what do you do with this and provocations in north korea? >> we've got limited options. they won't be sufficient to get them to change their ways. we

lazarus one? who are you working with?uld i, prisoner 052213 at the milford federal correctional --

. >> called donald trump lazarus because people were saying this health care bill was dead, buried, and cremated. donald trump, the president, has pulled out a great victory. is it a touchdown? no, but it's a first down. the ball is being advanced. for seven years, republicans were bobbing in the slipstream of the democratic party and now there is some action. i think it's a great day and i think it's a big wish and celebrate. obamacare was terrible, is terrible, and i think this is great progress. >> eric: eboni, this is one sixth of the american economy, it's a big legislative deal. we spend around 70% of american income, gdp, on health care. other countries don't come anywhere near that. the world is somewhere around 9.5, 10%. the e.u. is about 10% as well. >> eboni: it's huge and it's a very, very big, important deal. i believe in giving credit where credit is due. for donald trump in the g.o.p., today in the words of ice cube, it's a good day. i think krystal makes a good point about the long-term, short time. this is politically it win. he gets to deliver on the campaign promise.

similarities in some of the computer code lines used in the latest attack with an ear used by a group called lazarus. it has been links to hacks on sony picks, and polish banks. >> they first came onto our radar when the sony attack happened. they basically broke into sony's network and overwrote all the files bringing down infrastructure. they did a massive wiping attack on broadcasting and south korean banks. most recently they had been pinned against the attacks in bangladesh where they tried to send $1 billion. >> nobody is making a definite link. but these are not false flags, they might be able to establish the links. in china, 40,000 institutions were affected. it had further reach because of pirated software here. so organizations are trying saved. as the cyber defenses go up, investigators say they will work over the coming weeks and months to see whether that trail does, in fact, lead to pyongyang. now back to you. >>> this morning, the ntsb and the faa are in a neighborhood in new jersey. we have new video of a terrible plane crash that happened there. this is what it looked like when the

the all-star lineup today includes mark lazarus.he president is going to be giving the address at the air force academy in connecticut. we had the weekly oil inventories out during the interview. let's get a check on the numbers and what is happening with oil prices. julie: numbers have been bullish with oil prices. they are now rising 1.5%. 1.7 5 a drop of about million barrels in weekly oil supplies, and now we are looking at something like the 18th street week -- straight week of declines for oil inventories. gasoline inventories are down 413,000 barrels. particularly are bullish in the face of industry data that came out last night which showed a build in inventory. the government numbers, which are viewed as more accurate, are coming out in showing that there was a drop. a smaller drop than estimated, but a drop nonetheless. that is positive for oil prices. we are still seeing a deep selloff in stocks. the upturn in oil prices, while they are helping energy shares, they are not helping markets more broadly could you just heard

. ♪ to shining sea but it wasn't until emma lazarus's poem was added to lady liberty in 1903 that shek on the meaning she has today. since then the words "give me your tired, your poor, your huddled masses yearning to breathe free" have been a fancy way to say there ain't no party like an american party because an american party don't stop. well, just like an evite sent out to too many people, some of the hosts are trying to take the invitation back. >> we can't let these people come into our country. >> reporter: and most of us sure aren't getting that plus one. yep. once again our country has developed a case of selective amnesia when it comes to the basic premise of what made this country great. i mean, made this country what it is. america has always been a country built by lots of different people of various backgrounds. but for some reason this is really hard for some of us to remember. and fear has always been at the root of discrimination against immigrants and refugees. it's hard to imagine now but catholicism was once seen as a threat to the nation as publications across the

on the screen you see code from wannacry, the malware in this latest attack and also code from the lazarusch was tied to the sony pictures hack in 2014 which the u.s. has blamed on north korea and actually charged north korea for that attack. you look at the two boxes, and you can see sections of code that are exactly the shame. that's what the researchers are looking at. it's not definitive. early days, could be a false flag by the hacking group to make it look like north korea but this is what they are thinking and there are similarities by other hacking attacks by north korea. a major attack. 300,000 machines affected in 150 different countries. critical infrastructure, hospitals shut down as a result of this so real lives at stake and they can do this attack again if they don't figure out who is responsible and try to block them. >> will, if north korea was indeed behind the attack and it's not conclusive yet and if they, what kind of new threat does that north korea pose to the world. this is just another front in which they are gaining ammunition. >> obviously the united states, chin

how do you doeal with the o bish ware you wrote for the company versus the lazarus like -- that you wrote? >> i appreciate your call iing out on it. i still believe that apple's best days are behind it. this was the most spectacular stock and company in arguably the history of u.s. markets you know, revenue going up tenfold and revenues going up 15 fold over a b seven or eight-year period. there's to way that's going to happen again, but never the less, the stock is inexpensive and it's a trading stock and i felt at 93, that while i like the valuation, that uit wasn't necessarily the best entry point. i still -- >> tony -- it's not a trading stock. it's the opposite. it's an investment stock. stocks that go from 90 to 146 are not stocks you go in and out of. we don't want to be calling. we don't want to be a hedge fund making three points and losing 40. >> i don't think we want -- >> you know what i mean. >> i don't think anyone wants to go in and out, jim, but the stock was at 135 and went to 90. now, it's gone from 90 to 146. that to me feels like a tradinging stock and you've got to be

this hour, i am pleased to say we will be speaking to mark --ius and mark lazarus he sry. la i would like to bring in julie hyman to tell us about the markets. eric, theyou said, selloff has been relatively unusual in washington to translate into market turmoil. we have only had two, 1% or more and,ffs at all this year most are selling off in a single day, and most, two months. it has been quite unusual to see this kind of market action. ares as investors reassessing the trump administration and republicans oncongress, their chances getting through their agenda, among other things. droppingones up the, double the upper averages -- other averages. it is down 2.5%. many of the rails are down today as well. cs x as well. came when the story first crossed and if you look in the s&p 500, it has been making a couple of attempts at balances and has not been succeeded in at those bounces. continuing is indeed as the s&p 500 has been making new lows. is worst-performing stock advanced micro devices which the out with outlook last night. analysts said they were disappointed in it an

seeing right now on your screen on the left and comparing it to a group of code from a group called lazarusthe group that they say was behind the sony attack, and of course, the united states government says north korea was behind that. you don't have to know code here to understand that these are very similar looking. so, they say that this is just a possible link. the first few days of the investigation, they're not sure. some have questioned could it be a false flag, that another hacking group that's put in there, and experts like kasperski say they just don't think so, but they want more time to try and look at it. but three of the most important cyber researchers in the world have all concluded that there is a possible link here, at least when they're looking at the code, john. >> and remember, you know, north korea's connection to the sony hack a couple years ago. there is a record, there is a history here. samuel burke in london, thanks so much for this. >>> all right, minutes from now we will hear from the national security adviser, h.r. mcmaster. you're looking at live pictures fro

north korea based hackers lazarus group accused of launching attacks against south korean institutionsres in 2014, and the swift financial system last year. auto plants offices railroads around the world and fedex in the u.s. were hit with the most devastating attack affecting hospitals in great britain. ambulances were turned away and cancer treatments and surgeries were canceled. the hackers holding data hostage demanding ransom. >> the specific they made, repurpose the code and try again. they got the message now so anyone who can patch is going to. >> reporter: the british i.t. expert who found the kill switch to halt the cyberattack now being hailed a hero. >> i didn't intend to blow up on me to be all over the media. i just started doing my job and i don't think that i'm a hero. >> announcer >> reporter: there is still no official attribution. it could be someone else using the north korea code. dani a back us, abc news, los angeles. >> it is going to cost a bundle to have lunch with tim cook. the auctions earned a few hours ago. grand total, about $680,000. it was part of the te

security researchers have documented similarities between the code and malware created by lazarus group. a hacking operation linked to north korea. senior correspondent greg pal cot joins us live from london. what is the very latest about the possible north korea connection? >> exactly, shannon. circumstantial evidence at least is pointing to the possibility of north korean hackers behind this global malware attack. remember, the damage that's been done worldwide this ransomware that holds computers hostage until their users pay bitcoin. the ransom paid was low but it has hit companies and governments to the tunes of billions of dollars. now cybersecurity firms around the world today, in fact, including in south korea say that north korean hackers could be involved. we have long known the government of kim jong-un keps an army of geek crooks involved in past attacks. what people are now saying in the past 24 hours is portions of the code being used in this latest attack looking like past attacks as well including the infamous 2014 attack on sony pictures when they were ready to release

a group called the lazarus group that has been hitting other financial institutions.th korea, though, is, you know, a second or third tier player in using these kind of more simplistic approaches, where they take other people's code, slightly tweak it, and then try to use it at scale, as a signature of the north koreans. so, in light of the tensions that we've had recently over their missile tests, and the tightening of the diplomatic noose around their neck it isn't surprising that they're certainly a prime suspect in this incident. >> chad, thanks very much for joining us. chad sweet. >> thank you. >> all right coming up, another successful launch by spacex. this time it was the largest payload ever. details after the break. >>> and then later the man who brought beyonce to watermelon water. watermelon water. also known as the brand father has a knack for pairing celebrities with rising brands. we're going to talk about the building of successful brands in two areas of the snack market that already seem saturated but maybe not. "squawk box" will be right back. she c