Connecticut Healthcare Company · 2022-03
Andariel allegedly targeted a Connecticut healthcare company as part of a North Korean Reconnaissance General Bureau-linked conspiracy to hack and extort U.S. hospitals and health care providers using Maui ransomware. The charged activity included laundering ransom payments through China-based facilitators and using the proceeds to lease infrastructure for additional intrusions against defense, technology, government, manufacturing, and energy targets.
Ransomware ("m.exe") attack on "Connecticut Healthcare Company" · On or about March 11, 2022
On or about March 11, 2022, Conspirators gained unauthorized access to the Connecticut Healthcare Company's computer system and deployed ransomware similar to Maui, with a file named "m.exe," ... The Conspirators left a note on the victim's network demanding a ransom of two Bitcoin. [Case No. 2:24-cr-20061, U.S. District Court for the District of Kansas; filing: INDICTMENT filed against Rim Jong Hyok as to counts 1, 2.]
dollar figures: a ransom of two Bitcoin (demanded)
The Conspirators left a note on the victim’s network demanding a ransom of two Bitcoin.