The US State Department is offering a reward of up to $10 million for information that could help capture a North Korean military hacker being tracked as Rim Jong Hyok (he has also been linked to Maui ransomware attacks )
Hyok is a member of the North Korean hacking group Andariel, which has been linked to Maui ransomware targeting critical infrastructure and healthcare organizations across the United States.
The Department charges Hyok with conspiracy to commit computer intrusion and conspiracy to commit money laundering. On Wednesday, a federal arrest warrant was issued in U.S.for the District of Kansas.
See also: LockBit ransomware: $10 million reward for information on its leaders
So far, US authorities' investigations have linked Hyok and his North Korean associates to ransomware attacks that affected two US Air Force bases , five healthcare providers , four defence contractors and the Office of Inspector General of the National Aeronautics and Space Administration.
" Rim and other hackers conspired to compromise the computer systems of U.S. hospitals and other healthcare providers, installing the Maui ransomware to demand ransom ," the State Department said
Attacks on these entities caused many problems by disrupting healthcare services. The attackers demanded ransoms to fund malicious government operations against American companies.
The $10 million reward for North Korean hacker Rim Jong Hyok is being offered through Rewards for Justice (RFJ) program, which offers rewards for information about threat actors targeting U.S. national security.
See also: ALPHV/Blackcat ransomware: $10 million reward for information on its leaders
CISA and the FBI (in collaboration with cybersecurity from the United Kingdom and the Republic of Korea) also issued a report on this hacking group, which is also tracked as APT45, Onyx Sleet, DarkSeoul, Silent Chollima, and Stonefly/Clasiopa.
According to the report, Andariel hackers are focused on stealing “sensitive military information and intellectual property of important organizations.”
This hacking group poses a threat to a wide range of industry sectors worldwide, and all organizations involved in critical infrastructure must implement security measures to protect themselves.
Reward for Rim Jong Hyok
The reward is being given for the discovery of the North Korean military hacker, a member of the Andariel group, as this could lead to a significant reduction in the group's activity , since he is considered one of the main organizers of the attacks.
Furthermore, his arrest could provide important information about the group's operations, its techniques and the tools it uses, helping authorities develop more effective strategies to counter attacks.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
See also: Hive ransomware: 10 million reward for information on its members
The identification of the hacker could also influence the actions of other cybercriminals, since it will be seen that efforts to identify and arrest criminals are effective and that cyberspace violations do not go unpunished.
In the past, rewards have been announced for information on members and associates of various ransomware operations, including LockBit, Hive, Clop, Conti, REvil (Sodinokibi), and Darkside.
Source: www.bleepingcomputer.com
