US charges North Korean man involved in Bangladesh Bank heist
.The man has also been charged in Sony, WannaCry cyberattacks
The US government on Thursday charged and sanctioned a North Korean man for hacking into Bangladesh Bank’s account with the Federal Reserve Bank of New York in February 2016.
The charges, part of a strategy by the US government to deter future cyberattacks by naming and shaming the alleged perpetrators, also alleged that the North Korean hacker was also involved in the 2017 global WannaCry ransomware cyberattack and the 2014 cyberassault on Sony Corp , US officials said.
Hackers pulled off one of the biggest cyber heists in history when they stole $81 million from Bangladesh Bank’s account with the Federal Reserve Bank of New York in February 2016 that disappeared into the Philippine casino industry.
Park Jin Hyok worked as part of a team of hackers, also known as the Lazarus Group, to try to breach multiple other US businesses, according to the complaint. In 2016 and 2017, Park’s targets included defence contractor Lockheed Martin Corp. The complaint said there was no evidence Lockheed was breached.
The US Treasury Department has imposed sanctions against Park and the Chinese-based front company he worked for, Chosun Expo.
The North Korean mission to the United Nations did not immediately respond to a request for comment.
In 2014, US officials said unnamed North Korean hackers were responsible for a major cyber intrusion into Sony, which resulted in leaked internal documents and data being destroyed.
The attacks came after Pyongyang sent a letter to the United Nations, demanding that Sony not move forward with the movie “The Interview” that portrayed the US-backed assassination of a character made to look like North Korean leader Kim Jong Un.
Park used a series of online personas for social media platforms, including on Facebook and Twitter, to send malicious links to individuals involved in the production of “The Interview,” the complaint said. The malicious links carried North Korean-controlled malware.
In November 2014, Park allegedly launched the same style social media-focused attack against employees of AMC Theatres . The movie theatre chain in some cases delayed or canceled screenings of “The Interview” nationwide, Variety at the time reported. The complaint said there was no evidence AMC Theatres was breached.
Last year, the WannaCry ransomware attack affected thousands of businesses across the globe through a computer virus that encrypted files on affected systems, including Britain’s National Health Service, where nonfunctional computer systems forced the cancellation of thousands of appointments.
John Demers, the assistant attorney general of the National Security Division, said on Thursday that this marks the first time the US Justice Department has formally charged a hacker in connection with cyber crimes “sponsored” by the North Korean government.
“The department has charged, arrested and imprisoned hackers working for the governments of China, Russia and Iran. Today, we add the North Korean regime to our list, completing frankly four out of four of our principle adversaries in cyberspace.”
A senior Justice Department official said a criminal investigation into Park and his accomplices was still ongoing. There has been no communication between the US and North Korean government about a possible extradition, the official said.
No North Korean government officials were referenced in the complaint by name, though it does allege the government sponsored the attacks.that disappeared into the Philippine casino industry