World

North Korean military hacker charged in cyberattacks on US hospitals, NASA, military bases

Published

2 years ago

July 26, 2024

North Korean military hacker charged in cyberattacks on US hospitals, NASA, military bases

Federal prosecutors announced that a North Korean military intelligence operative was indicted in a conspiracy to hack into American health care providers, NASA, U.S. military bases and international entities.
Prosecutors say hacker Rim Jong Hyok’s aim is to steal sensitive information and install ransomware to fund more attacks. He is accused of laundering money through a Chinese bank and then using it to buy computer servers to use for his cyberattacks.
Hyok is also accused of targeting defense and energy companies in China, Taiwan and South Korea.

A North Korean military intelligence operative has been indicted in a conspiracy to hack into American health care providers, NASA, U.S. military bases and international entities, stealing sensitive information and installing ransomware to fund more attacks, federal prosecutors announced Thursday.

The indictment of Rim Jong Hyok by a grand jury in Kansas City, Kansas, accuses him of laundering the money through a Chinese bank and then using it to buy computer servers and fund more cyberattacks on defense, technology and government entities around the world.

The hacks on American hospitals and other health care providers disrupted the treatment of patients, officials said. He’s accused of targeting 17 entities across 11 U.S. states, including NASA and U.S. military bases, as well as defense and energy companies in China, Taiwan and South Korea.

SOUTH KOREA PREPARING ‘STARWARS’ LASER DEFENSE SYSTEM TO TAKE OUT NORTH KOREAN DRONES

For more than three months, Rim and other members of the Andariel Unit of North Korea’s Reconnaissance General Bureau had access to NASA’s computer system, extracting over 17 gigabytes of unclassified data, the indictment says. They also reached inside computer systems for defense companies in Michigan and California, as well as Randolph Air Force base in Texas and Robins Air Force base in Georgia, authorities say.

The malware enabled the state-sponsored Andariel group to send stolen information to North Korean military intelligence, furthering the country’s military and nuclear aspirations, federal prosecutors said. They’ve gone after details of fighter aircraft, missile defense systems, satellite communications and radar systems, a senior FBI official said.

“While North Korea uses these types of cyber crimes to circumvent international sanctions and fund its political and military ambitions, the impact of these wanton acts have a direct impact on the citizens of Kansas,” said Stephen A. Cyrus, an FBI agent based in Kansas City.

Rim Jong Hyok is wanted by the FBI. Federal prosecutors announced on July 25, 2024, that they indicted the North Korean national in a conspiracy to hack hospitals, military bases and NASA, in Kansas City, Kansas. (AP Photo/Nick Ingram)

Online court records do not list an attorney for Rim, who has lived in North Korea and worked at the military intelligence agency’s offices in both Pyongyang and Sinuiju, according to court records. A reward of up to $10 million has been offered for information that could lead to him or other foreign government operatives who target critical U.S. infrastructure.

The Justice Department has prosecuted multiple cases related to North Korean hacking, often alleging a profit-driven motive that sets the nation’s cybercriminals apart from hackers in Russia and China. In 2021, for instance, the department charged three North Korean computer programmers in a broad range of hacks including a destructive attack targeting an American movie studio and the attempted theft and extortion of more than $1.3 billion from banks and companies around the world.

In this case, the FBI was alerted by a Kansas medical center that was hit in May 2021. Hackers had encrypted its files and servers, blocking access to patient files, laboratory test results and computers needed to operate hospital equipment. A Colorado health care provider was affected by the same Maui ransomware variant.

A ransom note sent to the Kansas hospital demanded Bitcoin payments valued then at about $100,000, to be sent to a cryptocurrency address.

“Otherwise all of your files will be posted in the Internet which may lead you to loss of reputation and cause the troubles for your business,” the note reads. “Please do not waste your time! You have 48 hours only! After that the Main server will double your price.”

Federal investigators said they traced blockchains to follow the money: An unnamed co-conspirator transferred the Bitcoin to a virtual currency address belonging to two Hong Kong residents before it was converted into Chinese currency and transferred to a Chinese bank. The money was then accessed from an ATM in China next to the Sino-Korean Friendship Bridge connecting China and North Korea, according to court records.

In 2022, the Justice Department said the FBI seized approximately $500,000 in ransom payments from the money laundering accounts, including the entire ransom payment from the hospital.

An arrest of Rim is unlikely, so the biggest outcome of the indictment is that it may lead to sanctions that could cripple the ability of North Korea to collect ransoms this way, which could in turn remove the motivation to conduct cyber attacks on entities like hospitals in the future, according to Allan Liska, an analyst with the cybersecurity firm Recorded Future.

“Now, unfortunately, that will force them to do more cryptocurrency theft. So it’s not going to stop their activity. But the hope is that we won’t have hospitals disrupted by ransomware attacks because they’ll know that they can’t get paid,” Liska said.

He also noted that a Chinese entity was among the victims and questioned what the country, which is an ally of North Korea, thinks of being targeted.

“China can’t be too thrilled about that,” he said.

World

Investors brace for a bigger backlash from Middle East war

Published

5 hours ago

March 1, 2026

Press Room

Investors brace for a bigger backlash from Middle East war

From being just a fringe risk, conflict in the Middle East has become a top worry for investors unsettled by the prospect of a power struggle in Iran and a protracted regional war, with ramifications for everything from global trade to inflation.

World

Tel Aviv analyst shelters from 30 missile sirens in 48 hours, says Iran ‘won’t recover’

Published

6 hours ago

March 1, 2026

Press Room

Tel Aviv analyst shelters from 30 missile sirens in 48 hours, says Iran ‘won’t recover’

NEWYou can now listen to Fox News articles!

The past 48 hours in Tel Aviv have been unlike anything seen before, a leading security analyst has said, as sirens blared amid missile threats following Operation Epic Fury and U.S.-Israeli strikes in Iran.

“We are facing a biblical event — nothing less,” Kobi Michael, a senior researcher at the Institute for National Security Studies and the Misgav Institute, told Fox News Digital, speaking from his shelter in the city.

Like many Israelis, Michael said he had spent hours in reinforced rooms during the ongoing barrage, adding that he was “very experienced in this.”

“But this all requires time and determination, and I do hope that Trump will also have them both,” he said, speaking shortly after the president released a video message stating that the military operation would continue “until all of our objectives are achieved.”

Explosions from projectile interceptions by Israel’s Iron Dome missile defence system over Tel Aviv. (JACK GUEZ / AFP via Getty Images)

“Trump is the only one who can make the change — and that change will impact the entire region and the international order for years to come,” Michael added.

As of Sunday, Tel Aviv remained under a state of emergency following Iranian missile attacks that caused casualties and widespread damage.

According to The Associated Press, Iranian missile and drone strikes have killed approximately 11 Israeli civilians and wounded dozens more in retaliation for the U.S.-Israel strikes on Iran.

Shrapnel from missile impacts damaged at least 40 buildings in Tel Aviv, and authorities reported at least one death in the area from falling debris.

The Philippine Embassy in Israel confirmed the death of a Filipino national after a missile strike hit Tel Aviv on Saturday.

TOMAHAWKS, B-2 STEALTH BOMBERS AND ATTACK DRONES POUND OVER 1,000 IRANIAN TARGETS IN 24-HOUR BLITZ

People take shelter as Iran launched missiles and drones towards Israel following the US-Israeli attacks. ( Mostafa Alkharouf/Anadolu via Getty Images)

“We enter our shelter once the siren is heard and stay there until the Home Front Command announces that we can leave,” Michael said.

“Usually, it is about 20 to 30 minutes — unless there are further sirens during our stay. Since yesterday morning, it has happened around 30 times.”

Israel’s President Isaac Herzog also visited an impact site in Tel Aviv Sunday, delivering a message of resilience.

“The people of Israel and the people of Iran can live in peace. The region can live in peace. But what undermines peace time and again is terror instigated by this Iranian regime,” Herzog said.

EXILED IRANIAN CROWN PRINCE SAYS US STRIKES MARK ‘BEGINNING OF THE VERY END’ FOR REGIME

Israeli emergency service officer walks past building debris at the scene of a Iranian missile attack. (Ahmad GHARABLI / AFP via Getty Images)

Following the reported killing of Iran’s Supreme Leader Ayatollah Ali Khamenei and roughly 40 senior Iranian officials, Iran formed a provisional leadership council.

Iran named Ayatollah Alireza Arafi, President Masoud Pezeshkian and Judiciary Chief Gholam-Hossein Mohseni-Eje’i to lead roles.

“The Supreme Leader did not complete the necessary groundwork regarding his own succession,” Michael added.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

“Pezeshkian will face very troubling challenges due to their heavy losses, severe disruptions to control and command systems, and the massive bombing and attacks across Iran, including Tehran,” he said.

“Even if this regime doesn’t collapse, it will never be able to reconstitute itself, recover or return to its previous position,” Michael added.

Emma Bussey is a breaking news writer for Fox News Digital. Before joining Fox, she worked at The Telegraph with the U.S. overnight team, across desks including foreign, politics, news, sport and culture.

World

Israel FM says Europe too divided, slams Spanish PM

Published

7 hours ago

March 1, 2026

Press Room

Israel FM says Europe too divided, slams Spanish PM

Israeli minister Gideon Sa’ar said Europe “does not have unified position” on what role it should play in Iran as European ministers sought to establish a joint approach Sunday.

As Israel and the United States conducted a joint military strike on Iran, leading to the killing of Supreme Leader Ayatollah Ali Khamenei, Europe was kept on the sidelines.

EU member states did not participate in the operation and, in some cases, they were not informed prior as it is customary among strategic allies.

Asked whether Israel sought to keep Europe on the margins, Sa’ar said internal divisions within EU member states had kept them out of critical exchanges of operational details, unlike the United States, which the minister described as his country’s greatest ally.

“In Europe, you have all kinds of approaches,” he told Euronews. “You have countries like the Czech Republic which is strongly supporting this operation and then you have Spain, which is standing with all the tyrants of the world.”

On Saturday, Spanish prime minister Pedro Sánchez was among the most critical voices in Europe, suggesting the US-Israeli strikes on Iran risk plunging the region into total war.

“We reject the unilateral military action of the United States and Israel, which represents an escalation and contributes to a more uncertain and hostile international order,” Sánchez said Saturday. The Spanish PM reiterated that message on Sunday.

“We urge for de-escalation and call to respect international law in all conflicts,” Sánchez added. “You can be against a heinous regime, like the Iranian regime, while also rejecting a military intervention that is unjustified, dangerous and outside of international law.”

Sa’aar said Israel considers the operation “fully justified” citing the right to self-defense from a regime that “has called for the destruction of Israel” and lashed at the Spanish prime minister for sending an “anti-Israeli, anti-American message.”

“Read the statement, they are standing with Iran!” he added.

When asked if any of his European counterparts had manifested an interest in joining the military operation or provide support on the ground, Sa’ar said he held multiple exchanges with European ministers over the weekend and suggested that “if others want to join, they will know have to convey the message.”

On Sunday, Commission President Ursula von der Leyen appeared to back regime change in Iran in line with Israel and the US, saying that the “risk of further escalation is real. This is why a credible transition in Iran is urgently needed” in comments on Sunday.

Sa’ar told Euronews said the strategic strikes and the elimination of Khamenei alongside top regime commanders could “create the conditions to weaken the regime enough to allow the Iranians to take their future into their own hands”.

“The future leadership of Iran should be determined by the Iranian people through free elections. Our only requirement is that whoever comes to power in Iran must not pursue the destruction of Israel,” he said.

Watch the full interview on Euronews from 8pm CET