Bounty of 13.8 Billion Won... Who Is the North Korean Hacker Wanted by the U.S.?

Conspiracy Charges for Computer Hacking and Money Laundering

The U.S. Department of State has issued a wanted notice for Rim Jong Hyok, a hacker affiliated with the North Korean hacking group Andariel under the Reconnaissance General Bureau. Rim Jong Hyok is believed to currently be in North Korea, but the State Department has offered a reward of up to $10 million (approximately 13.8 billion KRW) for information leading to him.

The Federal Bureau of Investigation (FBI) announced on the 25th (local time) that Rim Jong Hyok, a North Korean national, was indicted in the U.S. District Court for the District of Kansas on charges including computer hacking and conspiracy to commit money laundering, and a federal arrest warrant has been issued. Rim Jong Hyok used ransomware to infiltrate computers of U.S. hospitals and medical companies to extort money. The FBI stated that he then laundered the proceeds and purchased additional internet servers to conduct cyber hacking targeting government and technology companies in the U.S., South Korea, and China.

FBI Wanted Notice. [Image source=FBI official website]

Andariel caused damage to five medical service providers, four U.S.-based defense contractors, two U.S. Air Force bases, and the NASA Office of Inspector General, with Rim Jong Hyok reportedly playing a role in these activities.

Specifically, Rim Jong Hyok and other North Korean hackers conspired to install ransomware on computer systems of U.S. hospitals and medical service providers and demand ransom. This ransomware attack encrypted computers used for medical tests and electronic medical records, disrupting medical services. A hospital in Kansas paid $100,000 in Bitcoin in May 2021 to unlock the ransomware and then reported the incident to the FBI. A medical service provider in Colorado also paid ransom, according to reports by the Associated Press citing Department of Justice officials.

On the 25th (local time), the U.S. Department of State announced that it will offer a reward of up to $10 million through the Rewards for Justice (RFJ) program for information leading to Im Jong-hyuk.
[Image source=RFJ Twitter]

The State Department explained that Rim Jong Hyok and others used the funds obtained through these activities for malicious cyber operations targeting U.S. government agencies and defense contractors both domestically and abroad. Through operations that began in November 2022, North Korean hackers extracted over 30 gigabytes (GB) of data, including unclassified technical information related to materials used in military aircraft and satellites developed before 2010, the State Department said. Rim Jong Hyok has worked at military intelligence offices in Pyongyang and Sinuiju and is currently believed to be residing in North Korea.

Meanwhile, the State Department announced that it will offer a reward of up to $10 million for information related to Rim Jong Hyok under the Rewards for Justice (RFJ) program. The State Department provides rewards through the RFJ program to individuals who provide information that helps prevent terrorism, capture terrorist leaders, or eliminate threats to U.S. national security.