July 26, 2024 at 02:34PM
The US Department of Justice has unsealed an indictment of a North Korean military intelligence operative, Rom Jong Hyok, accused of carrying out ransomware attacks against US healthcare facilities, and funneling the ransom payments to other breaches globally. The hacking crew, Andariel, controlled by DPRK’s military intelligence agency, poses an ongoing threat to various industry sectors worldwide. The US Department of State’s Rewards for Justice offers a reward of up to $10 million for information leading to their whereabouts.
Based on the meeting notes, the key takeaways are:
– The US Department of Justice has unsealed an indictment of a North Korean military intelligence operative named Rom Jong Hyok for carrying out ransomware attacks against healthcare facilities and other organizations.
– The indictment alleges that Hyok funneled ransom payments to arrange breaches into defense, technology, and government organizations globally.
– The ransom payments were laundered through Hong Kong and converted to Chinese yuan, then used to purchase virtual private servers for exfiltrating sensitive defense and technology information.
– Hyok is part of a hacking crew known as Andariel, which is involved in cyberattacks using a ransomware strain called “Maui”.
– Andariel is controlled by DPRK’s military intelligence agency, the Reconnaissance General Bureau, and is deemed an ongoing threat to various industry sectors worldwide.
– The US Department of State’s Rewards for Justice (RFJ) announced a reward of up to $10 million for information leading to the whereabouts of Rim Jong Hyok, Andariel, or co-conspirators.