The US Justice Department charged three North Korean military intelligence officials Wednesday in a campaign of cyberattacks to steal $1.3 billion in crypto and traditional currencies from banks and other targets.
The first action against Pyongyang by President Joe Biden’s administration took aim at what the department called “a global campaign of criminality” being waged by North Korea.
The department accused the three of a wide-ranging hacking and malware operation to obtain funds for their government while avoiding punishing UN sanctions that have cinched off its sources of income.
Over at least seven years, the officials created malicious cryptocurrency applications that opened back doors into targets’ computers; hacked into companies marketing and trading digital currencies like bitcoin; and developed a blockchain platform to evade sanctions and secretly raise funds, the department said.
The case filed in federal court in Los Angeles builds on 2018 charges against one of the three, identified as Park Jin Hyok.
He was charged with the 2014 hack of Sony pictures, the creation of the notorious WannaCry ransomware, and the 2016 theft of $81 million from the central bank of Bangladesh.
The new charges added two defendants, Jon Chang Hyok and Kim Il.
The allegations said the three worked together in the North Korean military intelligence’s hacking-focused Reconnaissance General Bureau, better known within the cybersecurity community as the Lazarus Group, or APT 38.
In addition to the earlier charges, the three allegedly operated out of North Korea, Russia and China to hack computers using spearfishing techniques, and to promote cryptocurrency applications loaded with malicious software that allowed them to empty victims’ crypto wallets.
They allegedly robbed digital currency exchanges in Slovenia and Indonesia and extorted a New York exchange of $11.8 million.
In a 2018 scheme, they robbed $6.1 million from ATM machines from Pakistan’s BankIslami after gaining access to its computer network.
The Justice Department did not specify exactly how much it believed the defendants have stolen altogether.
‘Keyboards instead of guns’
In addition, the charges said, Kim Il developed the blockchain-based digital currency-like “Marine Chain Token” which ostensibly was an instrument for investors to buy shares of shipping vessels.
He marketed opportunities to invest in the scheme in Singapore, without telling potential investors that it was mainly designed to hide ship ownership identities to help North Korea avoid sanctions, the charges said.
All of the actions, the Justice Department said, were to “further the strategic and financial interests of the (North Korean) government and its leader, Kim Jong Un.”
“North Korea’s operatives, using keyboards rather than guns, stealing digital wallets of cryptocurrency instead of sacks of cash, are the world’s leading bank robbers,” said Assistant Attorney General John Demers in a statement.
“Nation-state indictments like this are an important step in identifying the problem, calling it out in a legally rigorous format, and building international consensus,” Demers said.
In parallel, the department announced that Ghaleb Alaumary of Mississauga, Canada, had pleaded guilty to one charge of acting as a money launderer for the North Koreans.
Alaumary helped arrange for money to be removed from ATMs hacked by the North Korean operation.
He was also, the department said, a “prolific” money launderer for other hackers engaged in ATM cash-out schemes, cyber-enabled bank theft, and fraud schemes based on hijacking companies’ email.
The case announced Wednesday was the first open action taken against North Korea by the Biden administration, amid ongoing tensions over Pyongyang’s development of nuclear weapons and long-range missiles that threaten the United States and allies.
State Department spokesman Ned Price said the administration is reviewing policy toward the country.
The review “will take into account the totality of the malign activity and the threats that are emanating from North Korea,” Price said.
“Most frequently we speak of North Korea’s nuclear and ballistic missile program, but of course, its malicious cyber activity is something we are carefully evaluating and looking at as well,” he said.
391100 434990I recognize there exists a terrific deal of spam on this blog internet site. Do you need support cleaning them up? I can support among courses! 230299
842198 329552Actually fighter messages are supposed to amuse offer praise into the groom and bride. 1st time audio system watching over the top places really should also remember you see, the senior guideline with the speaking, which is your specific person. best man speeches brother 643411
237560 596472Ill create a hyperlink to the web page about my personal weblog. 734523
160011 136634Wonderful post will probably be posting this on my blog today keep up the excellent work. 262683
76651 877653My plate is real full and your tryna give me a lot more food, boy what the fuck is wrong wit you?!|guruisthebomb| 900273
267138 6109Wow, superb weblog structure! How long have you been blogging for? you make blogging glance easy. The total look of your web internet site is excellent, neatly as the content material material! 848810
hey there and thank you for your information –
I’ve certainly picked up anything new from right here.
I did however expertise several technical points using this web site,
since I experienced to reload the web site a lot of times previous
to I could get it to load correctly. I had been wondering if
your web hosting is OK? Not that I’m complaining, but slow
loading instances times will sometimes affect your placement in google
and can damage your high-quality score if advertising and marketing with
Adwords. Anyway I am adding this RSS to my email and could look
out for a lot more of your respective fascinating content.
Make sure you update this again soon.. Lista escape room
I read this post fully regarding the difference of hottest and previous
technologies, it’s remarkable article.
202438 564552for but another excellent informative post, Im a loyal reader to this weblog and I cant stress enough how considerably valuable information Ive learned from reading your content. I truly appreciate all of the hard work you put into this great blog. 911518
858701 92614Paper rolls really wonderful read you know alot about this subject i see! 436141
763171 111594Now im encountering a fresh short issues Once i cant look like allowed to sign up for the specific give food to, Now im utilizing search engines like google audience. 704943
700672 791145Aw, this was a really good post. In concept I wish to put in writing like this additionally ?taking time and actual effort to make an outstanding write-up?nevertheless what can I say?I procrastinate alot and by no indicates appear to get something done. 659891
132507 432939Yay google is my king helped me to find this great internet internet site ! . 519753
812338 267106Just wanna comment which you have a quite good site, I the style and design it really stands out. 830843
485534 220529But wanna say that this is invaluable , Thanks for taking your time to write this. 176771
556718 710724This internet site is my breathing in, real great design and perfect content . 36526
523282 229992not every person would need a nose job but my girlfriend genuinely needs some rhinoplasty coz her nose is kind of crooked- 485102
105297 412593hey was just seeing if you minded a comment. i like your web site and the theme you picked is super. I will be back. 640237
268262 903898As far as me being a member here, I wasnt aware that I was a member for any days, actually. When the article was published I received a notification, so that I could participate within the discussion of the post, That would explain me stumbuling upon this post. But were definitely all members in the world of concepts. 542380
309903 815547I certainly did not comprehend that. Learnt 1 thing new today! Thanks for that. 367792
835923 636077Wow! Thank you! I always wanted to write on my web site something like that. Can I incorporate a portion of your post to my internet site? 507410
672941 833495Vi ringrazio, ho trovato che quanto scritto non sia completamente corretto 209721
106116 956383Oh my goodness! a fantastic post dude. Thanks Nevertheless My business is experiencing issue with ur rss . Dont know why Not able to sign up for it. Possibly there is any person obtaining identical rss difficulty? Anyone who knows kindly respond. Thnkx 607010