@Oersted
note: I have a very basic understanding of the hacking world, the only programming I've done is a visual basic class in college
So with that said, the page I read was really just a description of what the particular virus is, how it operates and a note about its use a year or so ago. There's no mention of how to get ahold of it, or of other virus that carry out the same/similar functions. My understanding is that this kind of software was a variant of an existing virus that NK seems to have come up with and used in the past.
Are you saying that any theoretical hacker can get ahold of this virus and start crafting their own variant? Is such a thing even common in the hacking world? I've read before that the malware used isn't very sophisticated, how many other kinds of viruses are out in the ether that preform the same function as the one used on sony? And would such a thing be difficult to code?
Of course there isn't a description how to get it. It is malware, it is illegal. Wikipedia would get into trouble with a "download here" link.^^ Such malware like Shamoon is mainly available trough the darkweb, and yes, it isn't so hard to find your stuff there.
And yeah, it is common. If the software has been proven to work, it will get used again. And this software was used quite often. The advantages are obvious. Proven to work, you can cover up traces, you plain simply save costs and the damage is huge.
You can test yourself. Ever illegally downloaded music/videos? How many of them have traces of foreign languages like russian.
I don't know how many of these programs are going around. The "steal and then wipe data" technique is getting more common though. Look up the attack at the Sands Hotel. Same thing happened, most likely done by Iranians. The owner of Sands is a conservative rightwing named Adelson, who more than indirectly threatened a nuke close to Teheran if Iran doesn't stop their nuclear program. He had to pay a price.
Note: I'm not saying North Korea isn't responsible. From fully, to partly, to not all. All possible.