This Cybersecurity Advisory is part of the ongoing international effort to identify the dangers of ongoing ransomware attacks against critical infrastructure, and has been jointly researched by intelligence agencies of both the United States and the Republic of Korea. This advisory specifically highlights the Democratic People’s Republic of Korea’s state sponsored cybercrimes including ransomware attacks, use of cryptocurrency to generate revenue to support these operations, and specific attack vectors used. Further, mitigation strategies are provided to prevent more common threats.
