A North Korean hacking group stole secrets about satellites and warplanes from Nasa, US air bases and defence contractors, the FBI has revealed, as it launched a hunt to catch the perpetrators.
The US government is offering a $10 million reward for information leading to the identity of hackers targeting American national security assets, including nuclear secrets and information about missiles, submarines and drones.
On Thursday, the US and UK published joint guidance for facilities that could be attacked by Andariel, a “malicious cyber group” controlled by North Korea’s military intelligence agency, the Reconnaissance General Bureau.
The US State Department said a North Korean national named Rim Jong Hyok was linked to the group, and had hacked into US hospitals and other healthcare providers to extort ransoms to fund its cyber attacks.
The goal of the group was to steal information from American and foreign defence contractors, who build military technology, the State Department said.
Hackers had access to Nasa system for three months
The hackers gained access to Nasa’s computer system for more than three months, extracting more than 17 gigabytes of unclassified data, according to an indictment of Mr Rim.
They also accessed computer systems of defence companies in Michigan and California, and air bases in Texas and Georgia, US authorities said.
“While North Korea uses these types of cyber crimes to circumvent international sanctions and fund its political and military ambitions, the impact of these wanton acts have a direct impact on the citizens of Kansas,” said Stephen Cyrus, an FBI agent based in Kansas City.
One US contractor was hacked in November 2022, and lost more than 30 gigabytes of data, including “unclassified technical information regarding material used in military aircraft and satellites”. Much of the information secured was more than 14 years old.