U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 Foreign Agents

U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 Foreign Agents

December 1, 2023 at 03:48AM

The U.S. Treasury sanctioned Kimsuky, a North Korea-linked cyber espionage group, and eight individuals for supporting DPRK’s WMD programs and evading sanctions. Kimsuky, active since 2012, targets governments and organizations mainly for intelligence relevant to North Korea’s interests and missile technology.

**Takeaways from the Meeting:**

1. The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) imposed sanctions on the North Korea-linked collective Kimsuky and eight individuals associated with sanctions evasion.

2. The sanctions are a response to Kimsuky’s intelligence gathering for North Korea’s strategic objectives, including supporting its weapons of mass destruction (WMD) programs and missile technology procurement.

3. This move by OFAC follows the previous sanctions against the Lazarus Group and its offshoots in 2019 due to similar cyber-espionage activities.

4. North Korea’s recent launch of a military reconnaissance satellite is also cited as a reason for the sanctions.

5. The day prior to Kimsuky’s sanctioning, a virtual currency mixer service, Sinbad, was sanctioned for its involvement in processing stolen assets linked to hacks by the Lazarus Group.

6. Kimsuky, operational since at least 2012 and known by multiple names, targets governments, nuclear organizations, and entities involved in foreign relations, primarily focusing on those related to Korean Peninsula geopolitical issues.

7. The group, which is a part of North Korea’s primary foreign intelligence service (Reconnaissance General Bureau), utilizes social engineering tactics and moderately sophisticated technical capabilities.

8. Specific individuals are identified for various roles supporting North Korea’s missile program: Kang Kyong Il, Ri Sung Il, and Kang Phyong Guk for weapons sales; So Myong, Choe Un Hyok, and Jang Myong Chol for illicit financial transfers; Choe Song Chol and Im Song Sun for operating front companies that export skilled workers.

9. The geographic targeting of the cryptocurrency industry by North Korean groups varies, with Kimsuky focusing on South Korea and the Lazarus Group operating globally.

10. Follow the article’s source on Twitter and LinkedIn for more updates and exclusive content.

Full Article