Charges Filed Against North Korean Hacker for Cyber Attacks on U.S. Healthcare and Military Facilities

U.S. federal prosecutors announced on Thursday that a North Korean military intelligence operative has been formally charged with conspiring to hack U.S. healthcare providers, NASA, U.S. military bases, international organizations, and stealing sensitive information while deploying ransomware to fund further cyber attacks. According to the Associated Press, the indictment against Rim Jong-hyuk in Kansas City, Kansas, accuses him of laundering money obtained through a Chinese bank and then using those funds to purchase computer servers and finance additional cyber attacks on companies and defense entities, advanced technology centers, and government organizations worldwide. Officials stated that cyber operations against American hospitals and other healthcare providers disrupted patient treatment. Rim Jong-hyuk is accused of targeting 17 entities across eleven U.S. states, including NASA and U.S. military bases, as well as defense and energy companies in China, Taiwan, and South Korea. The indictment states that Rim and other members of the 'Andaril Unit' of North Korea's General Reconnaissance Bureau had access to NASA's computer systems for over three months, extracting more than 17 gigabytes of unclassified data. Officials say they also infiltrated the computers of defense companies in Michigan and California, as well as Randolph Air Force Base in Texas and Robbins Air Force Base in Georgia. Federal prosecutors noted that the malware used allowed the Andaril group, which is state-sponsored by North Korea, to send stolen information back to North Korea's military intelligence agency, aiding the country's military and nuclear ambitions. A senior FBI official stated that they were seeking details on fighter jets, missile defense systems, satellite communications, and radar systems. Stephen A. Cyrus, an FBI agent based in Kansas City, mentioned that while North Korea uses such cyber crimes to evade international sanctions and fund its political and military ambitions, the impact of 'these malicious actions' directly affects Kansas citizens. Airlines are struggling to return to normalcy following widespread cyber disruptions; extensive disruptions in Microsoft systems have led to the cancellation of thousands of flights and paralysis of essential services worldwide. NBC reported that three former Trump administration officials called for protection against 'threats' from the Iranian regime in 2023, amidst global disruptions in Microsoft systems that grounded planes and halted operations in banks and industries.