logo

North Korean hacker used hospital ransomware attacks to fund espionage

ID: 6ae9cf8d-3a10-532b-8e12-4bbe44200ea9

STIX ID: report--6ae9cf8d-3a10-532b-8e12-4bbe44200ea9

Feed Name: CyberScoop

Threat Score
90/100

Date Published: 2024-07-25

Date Updated: 2026-04-21

Author: eliasgroll

...
...

The report describes a U.S. indictment of North Korean-linked hacker Rim Jong Hyok and the Andariel/APT45 group for running ransomware operations against American healthcare providers to generate funds used to conduct espionage and data exfiltration from NASA, U.S. defense contractors, and Air Force bases, while leveraging custom malware and exploited vulnerabilities.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.