North Korean hackers may have stolen classified information on a new laser weapon system and key South Korean defence secrets after allegedly accessing a huge cache of data from defence and research firms in the South. A North Korean state-sponsored hacking group known as Andariel allegedly stole data from 14 entities, including South Korean defence firms, research institutes, and pharmaceutical companies, police said. An investigation has been launched into the cyber-hacking incident with the Seoul Metropolitan Police Agency and US Federal Bureau of Investigation (FBI) working to determine the extent of the data leak by the group. Andariel, sanctioned by the US Department of Treasury and designated as a North Korean state-sponsored malicious cyber group in 2019, established a proxy server from a district of the North Korean capital Pyongyang. The group accessed the proxy servers 83 times between last December and March, the Seoul Metropolitan Police Agency investigating the case said. The massive breach of data includes some 250 files or 1.2 terabytes of information and data stolen by hackers, according to Yonhap news agency. The group utilised the server to reach the websites of various firms and institutions, exploiting a South Korean hosting service that leases servers to undisclosed clients. The group has extorted 470 million won ($3,57,866; £2,83,591) worth of bitcoin vis ransomware attacks on three South Korean and foreign firms, police said, adding that some of the ramsons have been sent back to Pyongyang. Approximately 110 million won was sent to a Chinese bank using the financial account of a female foreigner, according to police investigations involving both local and international virtual asset exchanges. The funds were subsequently withdrawn at a bank outlet situated in an area along the China-North Korea border. It is believed that the funds were eventually funneled to North Korea, the police, adding that they are tracking the woman’s financial records to confirm if she played a part in money laundering. Experts have raised concerns over the isolated nation resorting to cryptocurrency theft as a means to finance its nuclear arsenal amid extensive sanctions, Cyberattacks resulting in millions of dollars have been attributed to North Korean hackers, despite previous denials of involvement in cybercrime by Pyongyang. Last year, North Korean hackers were alleged to have stolen 1.2 billion in virtual assets, according to South Korea’s spy agency. It said that Cyber criminals working for the North Korean government have made 1.5 trillion won in the last three years.
North Korea may have stolen secrets to new laser weapon
