US imposes sanctions on North Korea's Kimsuky hacking group

Brother

Professional
Messages
2,590
Reaction score
532
Points
113
Thus, the US authorities responded to the DPRK's creation of weapons of mass destruction.

The Treasury Department's Office of Foreign Assets Control (OFAC) has imposed sanctions on the North Korean-backed hacking group Kimsuky for stealing intelligence to support North Korea's strategic goals. OFAC also imposed sanctions on 8 North Korean agents for facilitating sanctions evasion and supporting the country's weapons of mass destruction programs.

Such measures were a direct response by the United States to the alleged launch of a military intelligence satellite by the DPRK on November 21 in order to undermine the DPRK's ability to generate revenue, acquire resources and collect intelligence necessary to advance its weapons of mass destruction program.

The US Treasury Department said that the Kimsuky group, operating since 2012, reports to the UN and US-appointed General Intelligence Bureau (Reconnaissance General Bureau), the main foreign intelligence service of the DPRK. Kimsuky is also known in the cybersecurity industry as APT43, Emerald Sleet, Velvet Chollima, TA406, and Black Banshee.

Initially targeting South Korean government agencies, think tanks, and individuals considered experts in various fields, the group gradually expanded its scope to include targets related to the United States, Europe, and the United Nations.

The main focus of the Kimsuky group is on intelligence gathering, which focuses on foreign and national security issues related to the Korean Peninsula and nuclear policy.

Recently, US federal authorities warned that Chinese and North Korean cybercrime groups continue to pose a serious threat to the US health sector and public health by conducting espionage and intellectual property theft campaigns. Among the main subjects of threats, the agency identified groups from China and North Korea, including Kimsuky.

In addition, the Kimsuky group in August conducted a cyber attack on computer systems used for joint US-South Korean military exercises. Hackers tried to gain access to the military infrastructure. As a result of the attack, the computers of Company A, which provides computer simulation services for the military exercise Freedom Shield, were compromised.
 
Top