CSIS entry 422 · September 2021
The U.S. Department of Justice sentenced Ghaleb Alaumary to more than 11 years in prison for aiding North Korean cybercriminals in money laundering. His assistance included ATM cash-out operations, cyber-enabled bank heists, and business email compromise (BEC) schemes. These attacks targeted banks, professional soccer clubs, and other unnamed companies in the U.S. and U.K.
13th September – Threat Intelligence Report · 2021-09-13
A dual US – Canadian national has been sentenced to more than 11 years in federal prison for conspiring to launder tens of millions of dollars in wire and bank fraud schemes, including a massive online banking theft by North Korean Cybercriminals, according to the U.S. Department of Justice.
country: banks headquartered in India, Pakistan and Malta; companies in the United States and U.K.
Other victims of Alaumary's crimes included banks headquartered in India, Pakistan and Malta, as well as companies in the United States and U.K., individuals in the United States and a professional soccer club in the U.K.
actors: North Korean-perpetrated (no group named)
The funds included those from a 2019 North Korean-perpetrated cyber-heist of a Maltese bank.
actors: Lazarus Group and Advanced Persistent Threat 38 (APT38)
These North Korean military hacking units are known by multiple names in the cybersecurity community, including Lazarus Group and Advanced Persistent Threat 38 (APT38). ... Alaumary was a prolific money launderer for hackers engaged in ATM cash-out schemes, cyber-enabled bank heists
dollar figures: tens of millions of dollars (laundered)
conspiring to launder tens of millions of dollars
dollar figures: more than $30 million in restitution
required to pay more than $30 million in restitution to victims