AP

US disrupts North Korean hackers that targeted hospitals

Jul 19, 2022, 7:26 AM | Updated: Jul 22, 2022, 8:46 am

NEW YORK (AP) — The FBI and Justice Department recently disrupted the activities of a hacking group that was sponsored by the North Korean government and that targeted U.S. hospitals with ransomware, ultimately recovering half a million dollars in ransom payments and cryptocurrency, Deputy Attorney General Lisa Monaco said Tuesday.

Monaco revealed new details of the attacks during a speech in which she encouraged organizations hit by ransomware to report the crime to law enforcement, both so that officials can investigate and so that they can help victim companies try to get ransom payments back.

In this case, Monaco said, a Kansas hospital that paid a ransom last year after being attacked by ransomware also contacted the FBI, which traced the payment and identified China-based money launderers who assisted the North Korean hackers in cashing out the illicit proceeds. The FBI was able to recover half a million dollars, including the entire ransom payment from the hospital.

“If you report that attack, if you report the ransom demand and payment, if you work with the FBI, we can take action,” Monaco said at the International Conference on Cyber Security, hosted by Fordham University. “We can follow the money and get it back; we can help prevent the next attack, the next victim; and we can hold cybercriminals accountable.”

U.S. officials in 2021 scrambled to confront a wave of high-profile ransomware attacks — in which hackers encrypt or lock up a victim’s data and demand exorbitant sums to return it — including against a crucial fuel pipeline on the East Coast. Though the pace of such large-scale, front-page attacks seems to have slowed, smaller targets — such as hospitals — continue to be affected.

FBI Director Christopher Wray said at the same conference that a particular challenge is that ransomware, once largely the province of garden-variety cyber criminals looking to extort cash, is now being increasingly deployed by hostile governments who are eager for destruction.

“The other thing we’re seeing more and more of is ransomware actors doing more than just locking up the system,” Wray said. “They’re exfiltrating the information, they’re threatening to release your proprietary information.”

This particular variant of ransomware, known as “Maui,” specifically targeted hospitals and public health organizations around the country.

Justice Department officials say the attack on the Kansas hospital, which they did not identify, took place in May 2021 when hackers encrypted the medical center’s files and servers. The hospital paid about $100,000 in Bitcoin to get its data back.

The department said that in addition to recovering the payment from the Kansas hospital, it also got back a payment from a health care provider in Colorado that was affected by the same Maui ransomware variant.

____

Follow Eric Tucker at http://www.twitter.com/etuckerAP

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Arizona will not approve new housing construction on the fast-growing edges of metro Phoenix that r...

Associated Press

Arizona Senate passes plan to manage rural groundwater, but final success is uncertain

A plan to manage rural groundwater passed the Arizona Senate amid concerns about the availability of sufficient water for future generations.

2 days ago

A woman pauses while shopping at a Kohl's store in Clifton, N.J., Jan. 26, 2024. On Thursday, Feb. ...

Associated Press

Federal Reserve’s preferred inflation gauge picked up last month in sign of still-elevated prices

An inflation gauge favored by the Federal Reserve increased in January, the latest sign that the slowdown in U.S. consumer price increases is occurring unevenly from month to month.

2 days ago

This undated image provided by Mikel Desmond shows his brother Marcus Tessier, who turned up in Dem...

Associated Press

Missing teen with autism found in New Mexico, about 200 miles away from his Arizona home

A missing teen with autism has been found in New Mexico — about 200 miles away from his home in southern Arizona.

2 days ago

A newly released report on last year’s fatal crash involving a pickup truck and a group of bicycl...

Associated Press

Report suggests steering of vehicle that caused fatal Goodyear bicycle crash worked fine

A new report on last year’s fatal Goodyear bicycle crash has cast doubts about the driver’s claim the vehicle’s steering locked up.

3 days ago

Israeli Embassy...

Associated Press

US airman dies after setting himself ablaze outside Israeli Embassy in Israel-Hamas war protest

An active-duty member of the U.S. Air Force has died after he set himself ablaze outside the Israeli Embassy in Washington, D.C.

5 days ago

Biden and Trump to visit Mexico border Thursday immigration...

Associated Press

Biden and Trump both plan trips to the Mexico border Thursday, dueling for advantage on immigration

President Joe Biden and former President Donald Trump will make dueling trips to the U.S-Mexico border on Thursday.

5 days ago

Sponsored Articles

...

DISC Desert Institute for Spine Care

Sciatica pain is treatable but surgery may be required

Sciatica pain is one of the most common ailments a person can face, and if not taken seriously, it could become one of the most harmful.

...

Collins Comfort Masters

Here’s 1 way to ensure your family is drinking safe water

Water is maybe one of the most important resources in our lives, and especially if you have kids, you want them to have access to safe water.

...

Collins Comfort Masters

Avoid a potential emergency and get your home’s heating and furnace safety checked

With the weather getting colder throughout the Valley, the best time to make sure your heating is all up to date is now. 

US disrupts North Korean hackers that targeted hospitals