World
North Korean military hacker charged in cyberattacks on US hospitals, NASA, military bases
- Federal prosecutors announced that a North Korean military intelligence operative was indicted in a conspiracy to hack into American health care providers, NASA, U.S. military bases and international entities.
- Prosecutors say hacker Rim Jong Hyok’s aim is to steal sensitive information and install ransomware to fund more attacks. He is accused of laundering money through a Chinese bank and then using it to buy computer servers to use for his cyberattacks.
- Hyok is also accused of targeting defense and energy companies in China, Taiwan and South Korea.
A North Korean military intelligence operative has been indicted in a conspiracy to hack into American health care providers, NASA, U.S. military bases and international entities, stealing sensitive information and installing ransomware to fund more attacks, federal prosecutors announced Thursday.
The indictment of Rim Jong Hyok by a grand jury in Kansas City, Kansas, accuses him of laundering the money through a Chinese bank and then using it to buy computer servers and fund more cyberattacks on defense, technology and government entities around the world.
The hacks on American hospitals and other health care providers disrupted the treatment of patients, officials said. He’s accused of targeting 17 entities across 11 U.S. states, including NASA and U.S. military bases, as well as defense and energy companies in China, Taiwan and South Korea.
SOUTH KOREA PREPARING ‘STARWARS’ LASER DEFENSE SYSTEM TO TAKE OUT NORTH KOREAN DRONES
For more than three months, Rim and other members of the Andariel Unit of North Korea’s Reconnaissance General Bureau had access to NASA’s computer system, extracting over 17 gigabytes of unclassified data, the indictment says. They also reached inside computer systems for defense companies in Michigan and California, as well as Randolph Air Force base in Texas and Robins Air Force base in Georgia, authorities say.
The malware enabled the state-sponsored Andariel group to send stolen information to North Korean military intelligence, furthering the country’s military and nuclear aspirations, federal prosecutors said. They’ve gone after details of fighter aircraft, missile defense systems, satellite communications and radar systems, a senior FBI official said.
“While North Korea uses these types of cyber crimes to circumvent international sanctions and fund its political and military ambitions, the impact of these wanton acts have a direct impact on the citizens of Kansas,” said Stephen A. Cyrus, an FBI agent based in Kansas City.
Rim Jong Hyok is wanted by the FBI. Federal prosecutors announced on July 25, 2024, that they indicted the North Korean national in a conspiracy to hack hospitals, military bases and NASA, in Kansas City, Kansas. (AP Photo/Nick Ingram)
Online court records do not list an attorney for Rim, who has lived in North Korea and worked at the military intelligence agency’s offices in both Pyongyang and Sinuiju, according to court records. A reward of up to $10 million has been offered for information that could lead to him or other foreign government operatives who target critical U.S. infrastructure.
The Justice Department has prosecuted multiple cases related to North Korean hacking, often alleging a profit-driven motive that sets the nation’s cybercriminals apart from hackers in Russia and China. In 2021, for instance, the department charged three North Korean computer programmers in a broad range of hacks including a destructive attack targeting an American movie studio and the attempted theft and extortion of more than $1.3 billion from banks and companies around the world.
In this case, the FBI was alerted by a Kansas medical center that was hit in May 2021. Hackers had encrypted its files and servers, blocking access to patient files, laboratory test results and computers needed to operate hospital equipment. A Colorado health care provider was affected by the same Maui ransomware variant.
A ransom note sent to the Kansas hospital demanded Bitcoin payments valued then at about $100,000, to be sent to a cryptocurrency address.
“Otherwise all of your files will be posted in the Internet which may lead you to loss of reputation and cause the troubles for your business,” the note reads. “Please do not waste your time! You have 48 hours only! After that the Main server will double your price.”
Federal investigators said they traced blockchains to follow the money: An unnamed co-conspirator transferred the Bitcoin to a virtual currency address belonging to two Hong Kong residents before it was converted into Chinese currency and transferred to a Chinese bank. The money was then accessed from an ATM in China next to the Sino-Korean Friendship Bridge connecting China and North Korea, according to court records.
In 2022, the Justice Department said the FBI seized approximately $500,000 in ransom payments from the money laundering accounts, including the entire ransom payment from the hospital.
An arrest of Rim is unlikely, so the biggest outcome of the indictment is that it may lead to sanctions that could cripple the ability of North Korea to collect ransoms this way, which could in turn remove the motivation to conduct cyber attacks on entities like hospitals in the future, according to Allan Liska, an analyst with the cybersecurity firm Recorded Future.
“Now, unfortunately, that will force them to do more cryptocurrency theft. So it’s not going to stop their activity. But the hope is that we won’t have hospitals disrupted by ransomware attacks because they’ll know that they can’t get paid,” Liska said.
He also noted that a Chinese entity was among the victims and questioned what the country, which is an ally of North Korea, thinks of being targeted.
“China can’t be too thrilled about that,” he said.
World
Orbán-style vetoes undermine EU democracy, Kallas tells Euronews
The instrumentalisation of vetoes undermines the democratic principles of the European Union as it hijacks the interests of 26 in the name of one single holdout, High Representative Kaja Kallas told Euronews in an exclusive interview.
ADVERTISEMENT
ADVERTISEMENT
Kallas was reflecting on the end of Viktor Orbán’s 16 years in uninterrupted power, during which the Hungarian prime minister frequently frustrated his fellow leaders with his near-constant, overlapping vetoes.
“We have to be clear that, actually, the EU treaties do not foresee the veto. The treaties are based on unanimity — that everybody agrees,” Kallas told Euronews in an interview recorded on the sidelines of an informal summit of EU leaders in Cyprus.
“We have seen recently that when 26 countries want something, and one does not, then we end up doing what that one country wants, not what the 26 want. So it is not really democracy.”
EU treaties provide a legal pathway to move from unanimity to qualified majority voting. However, in a significant Catch-22, such a shift itself requires unanimous consent.
“We definitely also have to look at our working methods to be more effective, because in this geopolitical world we need to be credible — and for that we need to be united and able to take decisions,” she added.
As the EU’s foreign policy chief — an area where unanimity is required — Kallas has dealt first-hand with many of Orbán’s vetoes. At times, she had to issue statements in her own name after joint communiqués proved impossible.
Following this difficult period, the High Representative said she was “very hopeful” about having “good cooperation” with the incoming government of Péter Magyar, who won Hungary’s elections on a pledge to restore ties between Budapest and Brussels, currently at an all-time low.
Magyar has said the veto remains a “valid option”, provided it is used constructively.
“We cannot run ahead of events. First, we need to have the new Hungarian government in place, which will probably happen in mid-May,” Kallas said.
“Then we will see whether we can revisit the decisions that have been blocked before.”
‘A geopolitical choice’
This week saw the lifting of two Hungarian vetoes: one on the €90 billion loan to Ukraine and another on the 20th package of sanctions against Russia.
Orbán, though, seems intent on leaving his veto on Ukraine’s accession process, in place for almost two years, as an inheritance for Magyar. As a result, Kyiv has yet to open a single cluster of negotiations.
The incoming prime minister has expressed opposition to fast-tracking talks with Kyiv, a view shared by other member states, who worry any shortcuts will undermine the credibility and integrity of the enlargement policy.
Ukrainian President Volodymyr Zelenskyy, meanwhile, keeps pushing for a “clear date” for his country’s admission under an accelerated timetable. He has also rejected overtures for half-baked membership as an alternative to fully-fledged rights.
“Ukraine does not need symbolic membership in the EU. Ukraine is defending itself — and it is also defending Europe. And it is not doing so symbolically — people are really dying,” Volodymyr Zelenskyy said this week before joining EU leaders in Cyprus.
“We are defending shared European values. I believe we deserve full membership.”
Kaja Kallas, who has been a strong supporter of Kyiv’s ambitions, said it was important to “work on both sides” — public opinion in member states and legal reforms in Ukraine — and to shift the narrative around candidate countries to highlight their potential contributions to the bloc.
“We need to talk about what we gain from these countries joining,” she said.
“A bigger Europe, a stronger Europe in terms of defence, and also a larger single market that benefits our companies — all of this makes us a more credible geopolitical power in the world,” she added. “It is always a geopolitical choice.”
Ukraine, Kallas noted, has by far the largest army in Europe, meaning that “Europe would be stronger if Ukraine were with us.”
World
Meta slashes 8,000 jobs, or 10% of its workforce, as Microsoft offers buyouts
Meta is laying off about 8,000 workers, or about 10% of its workforce, the company said Thursday as it continues to ramp up spending on artificial intelligence infrastructure and highly paid AI-expert hires.
The company said it was making the cuts for the sake of efficiency and to allow new investments in parts of its business, as first reported by Bloomberg, which also said the company will leave about 6,000 jobs unfilled.
Also Thursday, Microsoft said it was offering voluntary buyouts to thousands of its U.S. employees.
The software giant plans to make the offers in early May to about 8,750 people, or 7% of its U.S. workforce, according to two people familiar with the plan who were not authorized to speak about it publicly.
While an alternative to the sudden layoffs removing tech workers from peers like Meta and Oracle, the savings are likely tied to a similar industry upheaval that is requiring huge spending on the costs of artificial intelligence. Meta has already warned investors that its 2026 expenses will grow significantly — to the range of $162 billion to $169 billion — driven by infrastructure costs and employee compensation, particularly for the artificial intelligence experts it’s been hiring at eye-popping pay levels.
Wedbush analyst Dan Ives welcomed Meta’s cuts in a note to investors Thursday.
He said he sees it as part of a strategy of using AI tools to “automate tasks that once required large teams, allowing the company to streamline operations and reduce costs while maintaining productivity driving an increased need for a leaner operating structure.”
Microsoft, based in Redmond, Washington, has spent billions of dollars operating an ever-expanding global network of data centers powering cloud computing services, AI systems and its own suite of productivity tools, including the AI assistant Copilot.
CNBC reported earlier Thursday on a memo from Microsoft’s chief people officer, Amy Coleman, announcing the voluntary retirement plan.
“Our hope is that this program gives those eligible the choice to take that next step on their own terms, with generous company support,” Coleman wrote, according to CNBC.
World
Iran escalates Hormuz ‘tit-for-tat,’ seizes ship tied to billionaire close to Trump, Macron
NEWYou can now listen to Fox News articles!
Tensions escalated in the Strait of Hormuz April 22 after Iran’s IRGC seized two vessels in what analysts describe as “tit-for-tat” retaliation against the U.S. And one ship is linked to a billionaire shipping family tied to Presidents Donald Trump and Emmanuel Macron.
Video aired on Iranian state TV purportedly shows IRGC soldiers seizing the container ships in the Strait, Reuters said Thursday.
One vessel, the MSC Francesca, is owned by MSC Mediterranean Shipping Company, which was founded by Italian billionaire Gianluigi Aponte and is now controlled by his two children, Fox News Digital has learned.
“Some 20 Iranians armed to the teeth stormed the ship. Sailors are under Iranian control, their movements on the ship are limited but the Iranians are treating them well,” a relative of one of the MSC Francesca seafarers told Reuters.
TRUMP’S SPECIAL ENVOY WITKOFF AND KUSHNER VISIT US AIRCRAFT CARRIER AMID IRAN TENSIONS, TALKS
Soldiers take part in the seizure of the container ships MSC Francesca and Epaminondas in the Strait of Hormuz, according to footage broadcast on Iranian state TV and released April 22, 2026. (IRIB/Handout/Reuters)
“The ship is anchored 9 nautical miles from the Iranian coast. Negotiations between MSC and Iran are ongoing, our sailors are fine,” Montenegro’s minister of maritime affairs, Filip Radulovic, told state broadcaster RTCG.
Maritime intelligence firm Windward AI pointed to IRGC “tit-for-tat” tactics given the recent MSC vessel seizure.
This followed a U.S. naval blockade imposed on April 13, with Tehran warning of retaliation after U.S. forces also seized an Iranian vessel.
“The IRGC attacked three ships. It also captured and took in two of them — the MSC Francesca and the Epaminondas — while the Euphoria managed to get away,” Windward AI co-founder Ami Daniel told Fox News Digital.
IRAN FIRES LIVE MISSILES INTO STRAIT OF HORMUZ AS TRUMP ENVOYS ARRIVE FOR NUCLEAR TALKS
Soldiers take part in the operation seizing the container ships MSC Francesca and Epaminondas in the Strait of Hormuz, according to Iranian state TV April 22, 2026. (IRIB/Handout/Reuters)
“This is a ‘tit-for-tat’ exercise by the IRGC, which, along with the Houthis, has long claimed MSC is connected to Israel.
“Aponte, owner and chairman, has a Jewish wife, and MSC calls in Israel; however, so do all major liners.”
Diego Aponte, Gianluigi’s son, had been making “inroads with Trump’s circle,” Bloomberg reported April 13.
He also helped arrange a November 2025 White House meeting with Swiss business leaders that led to a preliminary deal to reduce the 39% tariffs imposed on Switzerland over the summer.
BLOCKADE 101: AMERICAN SEA POWER ON DISPLAY AS TRUMP CORNERS IRAN AND WARNS OFF CHINA
The MSC executive chairman has been photographed with French President Emmanuel Macron. (Reuters/Stephane Mahe)
Over the last year, MSC’s relationship with the White House also positioned father Gianluigi Aponte as a key player in a $19 billion deal with Li Ka-shing, as MSC and BlackRock moved to acquire two Panama Canal ports under pressure from Trump to place them in “friendly” hands, according to the outlet.
With a net worth of at least $37 billion, according to the Bloomberg Billionaires Index, it is Gianluigi Aponte and his wife, Rafaela Aponte-Diamant, who appear to mingle with world leaders.
The MSC executive chairman and Rafaela have been photographed with French President Emmanuel Macron.
GULF SHIPPING OPERATIONS GRIND TO HALT NEAR IRAN; US QUIETLY PREPARES FOR POSSIBLE STRIKE: ‘HEIGHTENED RISK’
The Panama-flagged MSC Francesca vessel docked in Long Beach, Calif., April 16, 2025. (Efrain Morales/Reuters)
Rafaela is also reportedly related to Alexis Kohler (his mother is said to be her cousin), who served as Macron’s secretary-general from May 2017 to April 14, 2025, and was described as “Macron’s second brain.”
The Aponte family’s vessel, carrying about 40 crew members, was taken toward Iran’s port of Bandar Abbas by the Iranian navy, sources told Reuters Thursday.
Four crew members, including the captain, are from Montenegro, officials said, while Croatia’s foreign ministry confirmed two Croatian nationals are also aboard.
MSC declined to comment, Reuters confirmed.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
The IRGC Navy claimed both vessels captured “were operating without the necessary permits.”
According to Lloyd’s List, the 2008-built MSC Francesca “normally operates in service between the U.S. West Coast, Asia and the Middle East Gulf.”
-
Sports3 minutes agoOlympic legend Kaillie Humphries signs with activist sportswear brand XX-XY Athletics amid political rise
-
Technology9 minutes agoFCC router rule raises questions about future updates
-
Business15 minutes agoCalifornia’s jet fuel stockpile hits two-year low as war strangles oil supplies
-
Entertainment21 minutes agoStagecoach 2026: How to watch Friday’s livestream with Cody Johnson, Ella Langley, Bailey Zimmerman
-
Lifestyle26 minutes agoL.A. Affairs: I loved someone who felt he couldn’t be fully seen with me
-
Politics33 minutes agoContributor: Carlson’s cautious apology does little to repair Trumpism’s damage
-
Sports45 minutes agoCancer left him blind. When his son was diagnosed, ex-USC long snapper found Trojans had his back again
-
World57 minutes agoOrbán-style vetoes undermine EU democracy, Kallas tells Euronews