Taiwanese Defense Company · 2023-01
The Taiwanese defense contractor intrusion was included in the U.S. Justice Department’s Andariel case against Rim Jong Hyok and alleged co-conspirators tied to North Korea’s Reconnaissance General Bureau. Prosecutors said the group used laundered Maui ransomware proceeds to fund additional infrastructure for intrusions against defense, technology, government, and energy targets, including Taiwanese defense contractors, and stole sensitive technical and intellectual-property data from victim environments.
Data exfiltrated from "Taiwanese Defense Company" · 2023 (data moved in or around April 2023)
"Taiwanese Defense Company" is a defense contractor headquartered in Taiwan, but with locations in the South Korea, and a 2023 victim. ... In or around April 2023, Conspirators moved over 250 gigabytes of stolen data (including technical and design information about military weapons and vehicles, such as tanks, fighter jets, rockets, and torpedoes) to Virtual Private Server 4. This defense technology information included data that had been exfiltrated from the Taiwanese Defense Company, South Korean Defense Company 1, and South Korean Defense Company 2. [Case No. 2:24-cr-20061, U.S. District Court for the District of Kansas; filing: INDICTMENT filed against Rim Jong Hyok as to counts 1, 2.]