The groups demand cryptocurrency ransoms and then use the funds for espionage cyber operations targeting the U.S. and South Korea. In July, the U.S. government recovered $500,000 that two hospitals paid as a ransom to North Korean hackers.
The Feb. 9 advisory warning is an update of a warning that came in July.
The Democratic People’s Republic of Korea often obfuscates its involvement in the ransomware attacks by working through a foreign third-party affiliate.
