2018_09_06_park_complaint_unsealed_0.pdf (2 MB)

The excerpt is a U.S. federal criminal complaint against Park Jin Hyok alleging conspiracy and wire-fraud-related computer intrusion activity from at least 2014 through 2017. Its table of contents links the case to North Korean computer networks, Brambul, proxy and DDNS infrastructure, reconnaissance, spear-phishing, the Sony Pictures Entertainment intrusion, financial institution intrusions, and WannaCry. The complaint frames these incidents as connected through accounts, malware families, infrastructure, and personas including Kim Hyon Woo and Chosun Expo accounts accessed from North Korean IP addresses. For DPRK-focused tracking, the document matters because it consolidates law-enforcement evidence across destructive attacks, bank theft activity, defense contractor targeting, South Korean targeting, and global ransomware activity.