NSA, FBI Warn of North Korea-Backed Cyber Espionage

The National Security Agency and the FBI have issued a joint cybersecurity advisory warning of a global cyber espionage campaign conducted by North Korea.

The advisory, titled “North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs,” details the activities of the Reconnaissance General Bureau, specifically the 3rd Bureau, the NSA said.

The group primarily targets defense, aerospace, nuclear and engineering companies to acquire sensitive information. The industry also identified the group using other names, including Onyx Sleet and DarkSeoul, throughout its malicious activities aimed at advancing the regime’s nuclear and military programs, according to the NSA.

Moreover, the agency said the group funds its operations through ransomware attacks on U.S. health care entities and poses a threat to various sectors in other nations, including Japan and India.

Dave Luber, the NSA cybersecurity director, emphasized the need for countermeasures to address the evolving cyber threats posed by North Korea and to empower the global cybersecurity community against the group’s tactics.