北 해킹조직‘안다리엘’평양發 해킹공격으로 방산기술 탈취, 북한으로 랜섬웨어 수익금 송금
2023-12-05 • KRNPA • North Korean hacking organization ‘Andariel' steals defense technology through hacking attack in Pyongyang and sends ransomware proceeds to North Korea •
Attachments
Seoul Metropolitan Police, working with the FBI, investigated Andariel attacks that stole defense-technology data from South Korean defense companies and generated ransomware proceeds. Investigators said the activity involved a Google account tied to infrastructure leased from South Korean providers and traced hacker access to an IP address in Ryugyong-dong, Pyongyang. The investigation also found that three domestic and foreign ransomware victims paid about 470 million won in bitcoin, part of which was allegedly laundered through an overseas exchange and sent toward North Korea.