Advertisement
News

How the FBI Is Hunting North Korean Hackers Who Attacked U.S. Healthcare System

A recently unsealed court document shows the FBI has obtained multiple warrants to read the contents of email inboxes used by suspected North Korean hackers.
North Koreans stand by a road along with a traffic warden.
Image: Thomas Evans/Unsplash.

This article was produced in collaboration with Court Watch, an independent outlet that unearths overlooked court records.

The FBI seized the contents of dozens of email addresses at Google and Yahoo used by North Korean hackers who are suspected of deploying ransomware against hospitals in the U.S., according to a recently unsealed court record reviewed by 404 Media.

The document shows how the FBI has been gathering evidence against the hackers known as Andariel, which private industry say are part of the North Korean hacking group dubbed Lazarus. The document also provides insight into how North Korean hackers often make use of U.S. tech company infrastructure to coordinate their operations.

Advertisement