Washington, July 26: Britain, the United States, and South Korea have issued a joint warning about a significant global cyber espionage campaign linked to North Korea, aimed at stealing sensitive military and nuclear information. The campaign, attributed to the North Korean hacking group Andariel, targets organizations in the defense, aerospace, nuclear, and engineering sectors, as well as medical and energy providers.
According to the UK National Cyber Security Centre (NCSC), Andariel is a unit of Pyongyang’s intelligence agency, working to advance North Korea’s military and nuclear ambitions. The group has utilized sophisticated malware and phishing attacks to infiltrate networks and extract critical technical data and intellectual property.
The NCSC’s Paul Chichester emphasized the seriousness of the threat, urging operators of critical infrastructure to bolster their defenses against such cyberattacks. The US Federal Bureau of Investigation (FBI) echoed these concerns, noting that Andariel remains a persistent threat across various industries globally.
In a related development, the US Justice Department has indicted North Korean national Rim Jong Hyok, allegedly a member of Andariel. Rim faces charges related to extortion attacks on US healthcare providers, among other cyber offenses. The State Department has offered a reward of up to $10 million for information leading to his arrest.
Authorities are urging heightened vigilance to safeguard sensitive information from North Korean cyber operations.