North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Summary The U.S. Federal Bureau of Investigation (FBI) and the following authoring partners are releasing this Cybersecurity Advisory to highlight cyber espionage activity associated with the Democratic People’s Republic of Korea (DPRK)’s Reconnaissance General Bureau (RGB) 3rd Bureau based in Pyongyang and Sinuiju:

• U.S. Cyber National Mission Force (CNMF)
• U.S. Cybersecurity and Infrastructure Security Agency (CISA)
• U.S. Department of Defense Cyber Crime Center (DC3)
• U.S. National Security Agency (NSA)
• Republic of Korea’s National Intelligence Service (NIS)
• Republic of Korea’s National Police Agency (NPA)
• United Kingdom’s National Cyber Security Centre (NCSC)

The RGB 3rd Bureau includes a DPRK (aka North Korean) state-sponsored cyber group known publicly as Andariel, Onyx Sleet (formerly PLUTONIUM), DarkSeoul, Silent Chollima, and Stonefly/Clasiopa.

Please click here to read more detail