North Korean Government Hacker Charged for Involvement in Ransomware Attacks Targeting U.S. Hospitals and Health Care Providers · 2024-07-25 (press release date)
A grand jury in Kansas City, Kansas, returned an indictment on Wednesday charging North Korean national Rim Jong Hyok for his involvement in a conspiracy to hack and extort U.S. hospitals and other health care providers, launder the ransom proceeds, and then use these proceeds to fund additional computer intrusions into defense, technology, and government entities worldwide. Their ransomware attacks prevented victim health care providers from providing full and timely care to patients.
Maui ransomware attacks on U.S. hospitals and healthcare providers · (not dated)
Rim and others conspired to hack into the computer system of U.S. hospitals and other healthcare providers, install Maui ransomware, and extort a ransom.
Andariel victims: five healthcare providers, four defense contractors, two U.S. Air Force bases, NASA · (not dated)
U.S. law enforcement investigators have documented that Andariel actors victimized five healthcare providers, four U.S.-based defense contractors, two U.S. Air Force bases and the National Aeronautics and Space Administration.
미국, 가장 오래된 북한 해킹 조직 ‘안다리엘’ 기소 · 2024-07-26
attribution sentence(s): [데이터넷] 2022년 마우이 랜섬웨어를 이용해 미국 병원과 의료 서비스에 피해를 입힌 북한 공격조직 ‘안다리엘’과 ‘림정혁’이라고 알려진 조직원이 미국에서 기소됐다. | 기소장에 따르면 림정혁이 포함된 안다리엘 조직은 북한 정찰총국 소속으로, APT45, 오닉스 슬릿(Onyx Sleet) 등으로도 불리다. | 2024년 북한 사이버 작전의 평가 구조/ 구글 시큐리티 맨디언트