BankIslami

lazarus.day

BankIslami was described in U.S. law-enforcement reporting as a 2018 ATM cash-out theft in Pakistan involving funds from North Korean-perpetrated cyber crime schemes. The linked Justice Department material places the incident alongside DPRK/RGB-linked financial-crime operations, including FASTCash-style ATM cash-outs, cyber-enabled bank heists, and laundering of stolen proceeds through associated money-laundering networks.

US DOJ press release 2021-02-17 (Jon Chang Hyok, Kim Il, Park Jin Hyok indictment)

Cyber-Enabled ATM Cash-Out Thefts: Thefts through ATM cash-out schemes - referred to by the U.S. government as "FASTCash" - including the October 2018 theft of $6.1 million from BankIslami Pakistan Limited (BankIslami).

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Reported: 2018-10; Victims: BankIslami; Motivations: FinancialGain; Sectors: Finance; Countries: Pakistan

US court filing via CourtListener RECAP: United States v. Hyok

Overt Act No. 41: On October 27, 2018, having gained unauthorized access to the computer network of BankIslami, the hackers caused fraudulent ATM withdrawal requests to be approved, which caused requesting ATMs to dispense approximately $6.1 million to money-launderer coconspirators, including coconspirators acting at the direction of unindicted coconspirator Ghaleb Alaumary. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]

including the October 2018 theft of $6.1 million from BankIslami Pakistan Limited (BankIslami)