A recent joint advisory from the United States, Britain, and South Korea has revealed that North Korean hackers, known as Anadriel or APT45, have been conducting a global cyber espionage campaign in an effort to steal classified military secrets to support Pyongyang's nuclear weapons program. These hackers, believed to be part of North Korea's Reconnaissance General Bureau, have targeted defense and engineering firms, including those involved in the manufacturing of tanks, submarines, naval vessels, fighter aircraft, missile systems, and radar systems.
Victims of these cyber attacks have included organizations such as NASA, Randolph Air Force Base, and Robins Air Force Base in the United States. The hackers have also used ransomware to target U.S. hospitals and healthcare companies to fund their operations.
One suspect, Rim Jong Hyok, has been charged by the U.S. Justice Department for conspiring to access computer networks in the United States and money laundering. The FBI is offering a reward of up to $10 million for information leading to Rim's arrest, who is believed to be in North Korea.
In response to these cyber attacks, the FBI and Justice Department have seized online accounts belonging to the hackers, including $600,000 in virtual currency that will be returned to victims of the ransomware attacks. Paul Chichester from Britain's National Cyber Security Centre has emphasized the lengths that North Korean state-sponsored actors are willing to go to pursue their military and nuclear programs.
This recent global cyber espionage operation highlights the ongoing threat posed by North Korean hackers to various industry sectors worldwide. The hackers have used common phishing techniques and computer exploits to gain unauthorized access to internal computer systems of targeted organizations. The international community continues to monitor and address the cyber threats posed by North Korea's intelligence agency.