• Advertise
  • Contact Us
  • Daily The Business
  • Privacy Policy
Friday, May 9, 2025
Daily The Business
  • Login
No Result
View All Result
DTB
No Result
View All Result
DTB

North Korean charged in cyberattacks on US hospitals, NASA and military bases

July 25, 2024
in World
Share on FacebookShare on TwitterWhatsapp

KANSAS CITY, Kan. (news agencies) — A North Korean military intelligence operative has been indicted in a conspiracy to hack into American health care providers, NASA, U.S. military bases and international entities, stealing sensitive information and installing ransomware to fund more attacks, federal prosecutors announced Thursday.

The indictment of Rim Jong Hyok by a grand jury in Kansas City, Kansas, accuses him of laundering the money through a Chinese bank and then using it to buy computer servers and fund more cyberattacks on defense, technology and government entities around the world.

The hacks on American hospitals and other health care providers disrupted the treatment of patients, officials said. He’s accused of targeting of 17 entities across 11 U.S. states, including NASA and U.S. military bases, as well as defense and energy companies in China, Taiwan and South Korea.

For more than three months, Hyok and other members of the Andariel Unit of North Korea’s Reconnaissance General Bureau had access to NASA’s computer system, extracting over 17 gigabytes of unclassified data, the indictment says. They also reached inside computer systems for defense companies in Michigan and California along with Randolph Air Force base in Texas and Robins Air Force base in Georgia, authorities say.

The malware enabled the state-sponsored Andariel group to send stolen information to North Korean military intelligence, furthering the country’s military and nuclear aspirations, federal prosecutors said. They’ve gone after details of fighter aircraft, missile defense systems, satellite communications and radar systems, a senior FBI official said.

“While North Korea uses these types of cyber crimes to circumvent international sanctions and fund its political and military ambitions, the impact of these wanton acts have a direct impact on the citizens of Kansas,” said Stephen A. Cyrus, an FBI agent based in Kansas City.

Online court records do not list an attorney for Hyok, who has lived in North Korea and worked at the military intelligence agency’s offices in both Pyongyang and Sinuiju, according to court records. A reward of up to $10 million has been offered for information that could lead to him or other foreign government operatives who target critical U.S. infrastructure.

The Justice Department has prosecuted multiple cases related to North Korean hacking, often alleging a profit-driven motive that sets the nation’s cybercriminals apart from hackers in Russia and China. In 2021, for instance, the department charged three North Korean computer programmers in a broad range of hacks including a destructive attack targeting an American movie studio and the attempted theft and extortion of more than $1.3 billion from banks and companies around the world.

In this case, the FBI was alerted by a Kansas medical center that was hit in May 2021. Hackers had encrypted its files and servers, blocking access to patient files, laboratory test results and computers needed to operate hospital equipment. A Colorado health care provider was affected by the same Maui ransomware variant.

An ransom note sent to the Kansas hospital demanded Bitcoin payments valued then at about $100,000, to be sent to a cryptocurrency address.

“Otherwise all of your files will be posted in the Internet which may lead you to loss of reputation and cause the troubles for your business,” the note reads. “Please do not waste your time! You have 48 hours only! After that the Main server will double your price.”

Federal investigators said they traced blockchains to follow the money: An unnamed co-conspirator transferred the Bitcoin to a virtual currency address belonging to two Hong Kong residents, and the money was eventually converted into Chinese currency and transferred to a Chinese bank. The money was then accessed from an ATM in China next to the Sino-Korean Friendship Bridge connecting China and North Korea, according to court records.

In 2022, the Justice Department said the FBI seized approximately $500,000 in ransom payments from the money laundering accounts, including the entire ransom payment from the hospital.

An arrest of Hyok is unlikely, so the biggest outcome of the indictment is that it may lead to sanctions that could cripple the ability of North Korea to collect ransoms this way, which could in turn remove the motivation to conduct cyber attacks on entities like hospitals in the future, according to Allan Liska, an analyst with the cybersecurity firm Recorded Future.

“Now, unfortunately, that will force them to do more cryptocurrency theft. So it’s not going to stop their activity. But the hope is that we won’t have hospitals disrupted by ransomware attacks because they’ll know that they can’t get paid,” Liska said.

He also noted that a Chinese entity was among the victims and questioned what the country, which is an ally of North Korea, thinks of being targeted.

“China can’t be too thrilled about that,” he said.

Goldberg reported from Minneapolis. Hollingsworth reported from Mission, Kansas. media reporter Alanna Durkin Richer contributed from Washington, D.C.

Tags: aChinaCrimeCybercrimedubai newsdubai news tvfGeneral newsHealthKansasKansas CityKS State WireMilitary and defensenNorth KoreaNorth Korea governmentPoliticsTechnologyU.S. newsUnited States government
Share15Tweet10Send
Previous Post

Salaried Class Pays 232% More Income Tax than Exporters, Retailers Combined Last Year

Next Post

Autonomous robots deliver food, groceries to residents of Sustainable City in Dubai

Related Posts

Trump met Israeli Strategic Affairs Minister Dermer on Thursday, Axios reports
World

Trump met Israeli Strategic Affairs Minister Dermer on Thursday, Axios reports

May 9, 2025
Dozens of Gaza communal kitchens shut as supply runs out
World

Dozens of Gaza communal kitchens shut as supply runs out

May 9, 2025
Ukraine’s cities quiet as Kremlin-sponsored ceasefire kicks in
World

Ukraine’s cities quiet as Kremlin-sponsored ceasefire kicks in

May 8, 2025
Israeli strikes on school housing displaced and on market kill 48 in Gaza
World

Israeli strikes on school housing displaced and on market kill 48 in Gaza

May 8, 2025
World

Asian airlines re-route, cancel flights due to India-Pakistan fighting

May 7, 2025
Trump says US should to stop ‘subsidizing’ Canada as trade talks continue
World

Trump says US should to stop ‘subsidizing’ Canada as trade talks continue

May 7, 2025

Popular Post

  • FRSHAR Mail

    FRSHAR Mail set to redefine secure communication, data privacy

    126 shares
    Share 50 Tweet 32
  • How to avoid buyer’s remorse when raising venture capital

    33 shares
    Share 337 Tweet 211
  • Microsoft to pay off cloud industry group to end EU antitrust complaint

    45 shares
    Share 18 Tweet 11
  • Saudi Arabia Launches World’s First Self-Driving Flying Taxi to Transport Hajj Pilgrims

    42 shares
    Share 17 Tweet 11
  • SingTel annual profit more than halves on $2.3bn impairment charge

    42 shares
    Share 17 Tweet 11
American Dollar Exchange Rate
  • Advertise
  • Contact Us
  • Daily The Business
  • Privacy Policy
Write us: info@dailythebusiness.com

© 2021 Daily The Business

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

No Result
View All Result
  • Advertise
  • Contact Us
  • Daily The Business
  • Privacy Policy

© 2021 Daily The Business

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.