Massachusetts Defense Company · 2022-11
The Massachusetts defense company intrusion was included in the U.S. Justice Department’s Andariel case charging Rim Jong Hyok and alleged co-conspirators linked to North Korea’s Reconnaissance General Bureau. The indictment alleged that Maui ransomware proceeds were laundered and used to fund infrastructure for further intrusions against defense, technology, government, and energy targets, with the actors exploiting known vulnerabilities and stealing sensitive data including military aircraft-related technical information and intellectual property.
Intrusion into "Massachusetts Defense Company" (military aircraft support); data exfiltration · Beginning in or around November 2022
Beginning in or around November 2022, Conspirators used Virtual Private Server 3 to gain and retain unauthorized access for several months to the Massachusetts Defense Company's computer system and extract over 30 gigabytes of data, including unclassified technical information about material used in military aircraft and satellites [Case No. 2:24-cr-20061, U.S. District Court for the District of Kansas; filing: INDICTMENT filed against Rim Jong Hyok as to counts 1, 2.]
Espionage hack of a U.S.-based defense contractor (30+ GB extracted) · began in November 2022
In one cyber espionage operation that began in November 2022, the malicious cyber actors hacked a U.S.-based defense contractor from which they extracted more than 30 gigabytes of data, including technical information regarding materials used in defense aviation assets.