US charges three North Korean hackers with $1.3bn theft

The United States has charged three North Korean men with stealing and extorting more than $1.3bn (£940m) from financial institutions and cryptocurrency exchanges around the world.

“North Korea’s operatives, using keyboards rather than guns, stealing digital wallets of cryptocurrency instead of sacks of cash, are the world’s leading 21st century nation-state robbers,” said John Demers, the US assistant attorney general.

“Simply put, the regime has become a criminal syndicate with a flag, which harnesses its state resources to steal hundreds of millions of dollars,” he continued, while unveiling the previously sealed federal indictments.

Into The Grey Zone: How cyber is used to attack

The charges follow a confidential UN report circulated among Security Council members that is believed to have claimed that North Korea had continued to maintain and develop its nuclear and ballistic missile programmes through funding secured with cyber heists.

The three men: Jon Chang Hyok, 31; Kim Il, 27; and Park Jin Hyok, 36, are accused of working for North Korea’s military intelligence services, specifically its Reconnaissance General Bureau (RGB).

Park had previously been charged in 2018 for his involvement in hacking on behalf of the North Korean state, but the other two men’s names are being made public for the first time.

The indictments against them contain detailed allegations of their involvement in cyber heists, including the attack on Sony Pictures in retaliation for its film The Interview, depicting a fictional assassination of the country’s leader, Kim Jong Un.

The men are also accused of creating the WannaCry ransomware which hit the NHS in 2017, as well as the development of fake cryptocurrency applications with backdoors that allowed them to steal users’ funds.

Pyongyang has denied involvement in all of these incidents.

“The scope of the criminal conduct by the North Korean hackers was extensive and long-running, and the range of crimes they have committed is staggering,” said Acting US Attorney Tracy Wilkison.

“The conduct detailed in the indictment are the acts of a criminal nation-state that has stopped at nothing to extract revenge and obtain money to prop up its regime.”

“This case is a particularly striking example of the growing alliance between officials within some national governments and highly sophisticated cyber-criminals,” added the US Secret Service assistant director Michael D’Ambrosio.

“The individuals indicted today committed a truly unprecedented range of financial and cyber crimes: from ransomware attacks and phishing campaigns, to digital bank heists and sophisticated money laundering operations.

“With victims strewn across the globe, this case shows yet again that the challenge of cybercrime is, and will continue to be, a struggle that can only be won through partnerships, perseverance, and a relentless focus on holding criminals accountable.”

Alongside the three North Koreans a Canadian man, Ghaleb Alaumary, was charged with working as a money launderer for them “among other criminal schemes” that involved millions of dollars.

Read Entire Article