DOCSLIB.ORG

Cyberwar 07 Juli 2019

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Cyberwar 07 Juli 2019 LV Geostrategie und Geopolitik Fachbereich 1 49069 Osnabrück Cyberwar Grundlagen-Methoden-Beispiele 07.07.2019 Zusammenfassung Der Cyberwar (Cyberkrieg) ist die kriegerische Auseinandersetzung mit den Mitteln der Informationstechnologie. Dieses Arbeitspapier unternimmt eine aktuelle Bestandsaufnahme und geht auf die theoretischen und praktischen Probleme ein. In der Praxis ist der Cyberwar ein integraler Bestandteil militärischen Handelns, lässt sich jedoch nicht ganz von der Spionage trennen, da das Eindringen in und Aufklären von gegnerischen Systemen wesentlich für das weitere Vorgehen ist. Nach einem Überblick über Angriffsmethoden, Angreifer (Advanced Persistent Threats), Spionagetools, Cyberwaffen und der Cyberverteidigung liegt ein besonderes Augenmerk auf der Einordnung von Cyberangriffen (Attribution) und der Smart Industry (Industrie 4.0). Anschließend werden die Cyberwar-Strategien der USA, Chinas, Russlands und weiterer führender Akteure besprochen. Ein abschließendes Kapitel befasst sich mit biologischen Anwendungen. Cyberwar – 07.07.2019 1 apl. Prof. Dr. Dr. K. Saalbach Inhalt 1. Grundlagen ........................................................................................................... 6 1.1 Einführung ................................................................................................................ 6 1.2 Hintergrund ............................................................................................................... 6 1.3 Cyberwar Definition ................................................................................................. 9 1.4 Cyberwar und Spionage .......................................................................................... 11 1.5 Terminologie ........................................................................................................... 11 1.6 Cyberwar und Völkerrecht ...................................................................................... 13 1.7 Die Geostrategie des Cyberspace ............................................................................ 16 1.7.1 Die physische Kontrolle über die Datenflüsse ................................................. 16 1.7.2 Die Kontrolle kritischer Komponenten ............................................................ 18 1.7.2.1 Rohstoffe ....................................................................................................... 18 1.7.2.2 Die Verflechtung USA - China ..................................................................... 18 1.7.2.3 Der Huawei-Konflikt .................................................................................... 19 1.7.3 Der Trend zur Zentralisierung ......................................................................... 20 2. Methoden ........................................................................................................... 22 2.1 Klassifikation .......................................................................................................... 22 2.1.1 Physische Zerstörung von Computern und ihren Verbindungen ..................... 22 2.1.2 Elektromagnetischer Puls EMP ....................................................................... 22 2.1.3 Der Angriff auf und die Manipulation von Computern und Netzwerken ........ 22 2.2 Der Angriff auf Computer ...................................................................................... 23 2.2.1 Die Grundlagen einer Cyberattacke ................................................................. 23 2.2.2 Kommunikationswege der Cyberattacken ....................................................... 23 2.2.3 Angriffsschema ................................................................................................ 25 2.2.3.1 Einführung .................................................................................................... 26 2.2.3.2 Zugang erlangen............................................................................................ 27 2.2.3.3 Schadprogramme installieren ........................................................................ 38 2.2.3.4 Cyberspionage-Tools .................................................................................... 39 2.2.3.5 Offensive Cyberwaffen ................................................................................. 40 2.2.4 Cyberwar führen .............................................................................................. 42 2.2.5 Insider-Threats ................................................................................................. 44 2.2.6 Informationskrieg ............................................................................................. 45 3. Cyberwar in der Praxis ....................................................................................... 49 3.1 Einführung .............................................................................................................. 49 3.2 Cyberwar von 1998-heute ....................................................................................... 49 3.2.0 Vorgeschichte: Pipeline-Explosion in der Sowjetunion .................................. 49 3.2.1 Moonlight Maze 1998-2000 ............................................................................ 49 3.2.2 Jugoslawienkrieg 1999..................................................................................... 49 3.2.3 Der Hainan- oder EP3-Zwischenfall von 2001 ................................................ 50 3.2.4 Großangriffe auf westliche Regierungs- und Industrie-Computer 2000-2011 50 3.2.5 Der Angriff auf Estland im Jahre 2007 ............................................................ 51 3.2.6 Der Angriff auf Syrien 2007 ............................................................................ 52 3.2.7 Der Angriff auf Georgien 2008........................................................................ 52 3.2.8 Eindringen in amerikanische Kampfdrohnen 2009/2011 ................................ 52 3.2.9 Attacken in der Ukraine ................................................................................... 53 3.2.10 Nord-Korea .................................................................................................... 54 Cyberwar – 07.07.2019 2 apl. Prof. Dr. Dr. K. Saalbach 3.2.11 Lokale Cyberkonflikte ................................................................................... 54 3.2.12 Cyberwar gegen den Islamischen Staat (‘IS’) ............................................... 55 3.2.13 Cyberkonflikte im Jahr 2019 ......................................................................... 57 4. Attribution .......................................................................................................... 59 4.1 Einführung .............................................................................................................. 59 4.2 Attribution von Cyberangriffen .............................................................................. 59 4.3 Hacker ..................................................................................................................... 62 4.4 Attribution im Cyberwar ......................................................................................... 66 5. Hochentwickelte Hackereinheiten und Malware-Programme ........................... 67 5.1 Hochentwickelte Malware-Programme .................................................................. 67 5.2 Advanced Persistent Threats (APTs) ...................................................................... 69 5.2.1 Die Equation Group ......................................................................................... 74 5.2.1.1 Entdeckungsgeschichte - Der ‚digitale Erstschlag’ ...................................... 74 5.2.1.2 Die Tools der Equation Group ...................................................................... 78 5.2.1.3 Der Shadow Brokers-Vorfall ........................................................................ 81 5.2.2 Die Longhorn Group/Lamberts/Der Vault 7-Vorfall ....................................... 84 5.2.3 Sauron/Strider und Slingshot ........................................................................... 86 5.2.4 APT28 und APT29 .......................................................................................... 87 5.2.4.1 APT28 (alias Sofacy, Pawn Strom, Csar Team, Sednit, Fancy Bear, Strontium) ................................................................................................................. 87 5.2.4.2 APT29 (alias Cozy Duke/Cozy Bear) ........................................................... 88 5.2.4.3 Der Cyberangriff auf den Bundestag ............................................................ 89 5.2.4.4 Der DNC hack/Angriff auf die Wahlsysteme ............................................... 91 5.2.4.5 Der WADA hack........................................................................................... 93 5.2.4.6 Der Macron-Hack ......................................................................................... 93 5.2.4.7 Die Angriffe auf Yahoo ................................................................................ 93 5.2.4.8 Die LoJax firmware-Attacke ......................................................................... 93 5.2.4.9 Weitere Aktivitäten ....................................................................................... 94 5.2.5 Die Waterbug Group (Turla/Snake/Ouroburos/Venomous Bear/Krypton/Group88) ............................................................................................ 94 5.2.5.1
Load more

Recommended publications
  • View Final Report (PDF)
    TABLE OF CONTENTS TABLE OF CONTENTS I EXECUTIVE SUMMARY III INTRODUCTION 1 GENESIS OF THE PROJECT 1 RESEARCH QUESTIONS 1 INDUSTRY SITUATION 2 METHODOLOGY 3 GENERAL COMMENTS ON INTERVIEWS 5 APT1 (CHINA) 6 SUMMARY 7 THE GROUP 7 TIMELINE 7 TYPOLOGY OF ATTACKS 9 DISCLOSURE EVENTS 9 APT10 (CHINA) 13 INTRODUCTION 14 THE GROUP 14 TIMELINE 15 TYPOLOGY OF ATTACKS 16 DISCLOSURE EVENTS 18 COBALT (CRIMINAL GROUP) 22 INTRODUCTION 23 THE GROUP 23 TIMELINE 25 TYPOLOGY OF ATTACKS 27 DISCLOSURE EVENTS 30 APT33 (IRAN) 33 INTRODUCTION 34 THE GROUP 34 TIMELINE 35 TYPOLOGY OF ATTACKS 37 DISCLOSURE EVENTS 38 APT34 (IRAN) 41 INTRODUCTION 42 THE GROUP 42 SIPA Capstone 2020 i The Impact of Information Disclosures on APT Operations TIMELINE 43 TYPOLOGY OF ATTACKS 44 DISCLOSURE EVENTS 48 APT38 (NORTH KOREA) 52 INTRODUCTION 53 THE GROUP 53 TIMELINE 55 TYPOLOGY OF ATTACKS 59 DISCLOSURE EVENTS 61 APT28 (RUSSIA) 65 INTRODUCTION 66 THE GROUP 66 TIMELINE 66 TYPOLOGY OF ATTACKS 69 DISCLOSURE EVENTS 71 APT29 (RUSSIA) 74 INTRODUCTION 75 THE GROUP 75 TIMELINE 76 TYPOLOGY OF ATTACKS 79 DISCLOSURE EVENTS 81 COMPARISON AND ANALYSIS 84 DIFFERENCES BETWEEN ACTOR RESPONSE 84 CONTRIBUTING FACTORS TO SIMILARITIES AND DIFFERENCES 86 MEASURING THE SUCCESS OF DISCLOSURES 90 IMPLICATIONS OF OUR RESEARCH 92 FOR PERSISTENT ENGAGEMENT AND FORWARD DEFENSE 92 FOR PRIVATE CYBERSECURITY VENDORS 96 FOR THE FINANCIAL SECTOR 96 ROOM FOR FURTHER RESEARCH 97 ACKNOWLEDGEMENTS 98 ABOUT THE TEAM 99 SIPA Capstone 2020 ii The Impact of Information Disclosures on APT Operations EXECUTIVE SUMMARY This project was completed to fulfill the including the scope of the disclosure and capstone requirement for Columbia Uni- the disclosing actor.
    [Show full text]
  • The Cyber Threat to UK Business 2016/2017 Report Page 1
    The cyber threat to UK business 2016/2017 Report Page 1 Contents Foreword (Ciaran Martin - NCSC) ..................................................................................................................................... 2 Foreword (Donald Toon - NCA) ........................................................................................................................................ 3 Executive summary ........................................................................................................................................................... 4 What is the threat? ........................................................................................................................................................... 5 The year in review: pivotal incidents of 2016 ................................................................................................................ 10 Horizon scanning: future threats .................................................................................................................................... 13 Fighting back: what can business do? ............................................................................................................................ 15 Case studies illustrating UK LEA and industry joint protect work ................................................................................. 19 Debate: can we stop the Internet from being used for crime? .................................................................................... 20 Page 2 The
    [Show full text]
  • Cyber Threats Facing America: an Overview of the Cybersecurity Threat Landscape
    S. Hrg. 115–298 CYBER THREATS FACING AMERICA: AN OVERVIEW OF THE CYBERSECURITY THREAT LANDSCAPE HEARING BEFORE THE COMMITTEE ON HOMELAND SECURITY AND GOVERNMENTAL AFFAIRS UNITED STATES SENATE ONE HUNDRED FIFTEENTH CONGRESS FIRST SESSION MAY 10, 2017 Available via the World Wide Web: http://www.fdsys.gov/ Printed for the use of the Committee on Homeland Security and Governmental Affairs ( U.S. GOVERNMENT PUBLISHING OFFICE 27–390 PDF WASHINGTON : 2018 COMMITTEE ON HOMELAND SECURITY AND GOVERNMENTAL AFFAIRS RON JOHNSON, Wisconsin, Chairman JOHN MCCAIN, Arizona CLAIRE MCCASKILL, Missouri ROB PORTMAN, Ohio THOMAS R. CARPER, Delaware RAND PAUL, Kentucky JON TESTER, Montana JAMES LANKFORD, Oklahoma HEIDI HEITKAMP, North Dakota MICHAEL B. ENZI, Wyoming GARY C. PETERS, Michigan JOHN HOEVEN, North Dakota MAGGIE HASSAN, New Hampshire STEVE DAINES, Montana KAMALA D. HARRIS, California CHRISTOPHER R. HIXON, Staff Director GABRIELLE D’ADAMO SINGER, Chief Counsel COLLEEN BERNY, Professional Staff Member MARGARET E. DAUM, Minority Staff Director JULIE KLEIN, Minority Professional Staff Member LAURA W. KILBRIDE, Chief Clerk BONNI DINERSTEIN, Hearing Clerk (II) C O N T E N T S Opening statements: Page Senator Johnson ............................................................................................... 1 Senator McCaskill ............................................................................................ 2 Senator Lankford .............................................................................................. 15 Senator Daines
    [Show full text]
  • Hack Para Big Time 2019 New Inazuma Eleven GO 2K19 Mini Forum, Answers, Tips, Tricks and Glitches
    hack para big time 2019 New Inazuma Eleven GO 2K19 Mini Forum, Answers, Tips, Tricks and Glitches. Ask a Question or Help other Players by Answering the Questions on the List Below: Rate this app: More details. For Android: 4.0 and up Guide: New Inazuma Eleven GO 2K19 cheats tutorial When updated: 2019-06-30 Star Rating: 4.1952863 Name: New Inazuma Eleven GO 2K19 hack for android Extension: Apk Author: NGmer File Name: inazuma.newtips.eleventips.soccerguide Current Version: 2.1 User Rating: Everyone Downloads: 1000- Version: mod, apk, unlock System: Android Type: Education. Share New Inazuma Eleven GO 2K19 Cheats Guides Hints And Tutorials - Best Tactics from Users below. New Inazuma Eleven GO 2K19 Tricks and Codes: Add your tips. Hints and Tips: Glitches: Codes: Guide: Easter Eggs: Advice for new users: Please wait 10 seconds. New Inazuma Eleven GO 2K19 Hack Cheats Codes Tips Tricks Advices for New Users and Q&A! Add your questions or answers. Q: How to get the best score? Q: What is your favourite trick in this game/app? Q: What is your strategy? Watch New Inazuma Eleven GO 2K19 videoreviews, gameplays, videoinstructions, tutorials, guides, tips and tricks recorded by users, pro players and testers. New Inazuma Eleven GO 2K19 Gameplay, Trailers and Related Videos. Watch Inazuma Eleven Go Strikers 2013 Raimon GO 2.0 Vs Inazuma Legend Japan Wii 1080p (Dolphin/Gameplay) video. Watch NBA 2K19 ► MY PRO PLAYER #19 - ON LES EXPLOOOOSE video. Watch Mashup || Inazuma Eleven GO opening 2 VS Sincara WWE || video. Watch Inazuma Eleven Go Strikers 2013 Part3 video.
    [Show full text]
  • Bashe Attack Global Infection by Contagious Malware 2
    CyRiM Report 2019 Bashe attack Global infection by contagious malware 2 About CyRiM About Cambridge Centre for Risk Studies Cyber risks are emerging risk with new complexities that The Centre for Risk Studies is a world leading centre for call for insurers and risk managers to jointly develop the study of the management of economic and societal innovative solutions and tools, and enhance awareness risks. The Centre’s focus is the analysis, assessment, and underwriting expertise. and mitigation of global vulnerabilities for the The Cyber Risk Management (CyRiM) project is led by advancement of political, business, and individual NTU-IRFRC in collaboration with industry partners and decision makers. academic experts. CyRiM is a pre-competitive research project that aims to foster an efficient cyber risk The Centre provides frameworks for recognizing, insurance market place through engaging industry and assessing, and managing the impacts of systemic academic experts guided by government and policy level threats. The research programme is concerned with research. The CyRiM project will help Singapore to catastrophes and how their impacts ripple across an become an industry centre of excellence on cyber risk increasingly connected world with consequent effects on and grow the cyber risk insurance market by promoting the international economy, financial markets, firms in the both the demand and the supply of insurance coverage. financial sectors, and global corporations. To test research outputs and guide new research agendas, the For more information about CyRiM please visit Centre engages with the business community, http://irfrc.ntu.edu.sg/Research/cyrim/Pages/Home.aspx government policy makers, regulators, and industry bodies.
    [Show full text]
  • Cyber Crime the Threat to Small and Medium Sized Businesses Cyber Crime: What Does It Mean for You?
    Cyber Crime The threat to small and medium sized businesses Cyber Crime: What does it mean for you? Technology is at the core of our cyber criminals to gain control over It’s critical that you are up-to-speed everyday lives, so much so that for the computer systems of a large on what criminals are doing and – many of us it’s difficult to remember entertainment corporation while more importantly – what you can a time without mobile phones, hackers were able to gain access do to minimise the likelihood of computers, email and the internet. to millions of a global eCommerce becoming the victim of these types company’s customer records. of attacks. To that end, we also focus These innovations have changed the on educating our customers, which is way we connect with one another, What might be surprising, however, why, in addition to online resources1 both on a personal and business is that in their most recent Internet we’ve developed this overview to level. Technology has played a key Security Threat Report, Symantec give you a snapshot of the cyber role in how the world economy found that 60% of all targeted crime landscape in general, as well has evolved over the course of attacks were levelled against as in terms of specific threats to the last decade, but it’s also given small and medium-sized (SME) small and medium sized businesses criminals new tools for gaining businesses. One reason for this is like yours. In the pages that follow access to information and funds.
    [Show full text]
  • Information Assurance MELANI
    Federal IT Steering Unit FITSU Federal Intelligence Service FIS Reporting and Analysis Centre for Information Assurance MELANI www.melani.admin.ch/ INFORMATION ASSURANCE SITUATION IN SWITZERLAND AND INTERNATIONALLY Semi-annual report 2016/II (July – December) 20 APRIL 2017 REPORTING AND ANALYSIS CENTRE FOR INFORMATION ASSURANCE MELANI https://www.melani.admin.ch 1 Overview/content 1 Overview/content .............................................................................................. 2 2 Editorial ............................................................................................................. 5 3 Key topic: internet of things ............................................................................ 6 3.1 Definition ............................................................................................................. 6 3.2 The unsecure internet of things? ....................................................................... 7 3.3 Consequences for the future .............................................................................. 7 3.4 Guidelines and precautionary measures ........................................................... 8 4 Situation in Switzerland ................................................................................... 9 4.1 Espionage ............................................................................................................ 9 4.1.1 Switzerland as an indirect target of possible espionage activity ................................... 9 4.2 Data leaks .........................................................................................................
    [Show full text]
  • United Kingdom Threat Landscape
    United Kingdom Threat Landscape 1 © 2018 Anomali, Inc. All rights reserved. General Inormation Government: Parliamentary constitutional monarchy; a Commonwealth realm Capital: London Chief of State: Prime Minister Theresa May Natural Resources: Coal, petroleum, natural gas, iron ore, lead, zinc, gold, tin, limestone, salt, clay, chalk, gypsum, potash, silica sand, slate, arable land Societal Grievances: Brexit, gay marriage, LGBT rights, forced deportation, racism, surveillance, gender workplace diversity, women’s rights, future of the NHS, US President Trump APT Groups: APT3, Lazarus, APT10, APT17, Comment Crew, Axiom, Night Dragon, APT15, FIN4, APT28 Hacktivist Groups: Anonymous, Null Hacking Crew, Lizard Squad, Syrian Electronic Army, TurkHackTeam, AnonGhost, Lulzsec Extremist Groups: New IRA1, ISIS, National Action (NS131/Scottish Dawn), Al-Qaeda Criminal Groups: Albanian Mafia, Tottenham Mandem, Rathkeale Rovers Malware Families: Ramnit, Dridex, Trickbot, Carbanak, Odinaff, WannaCry, Dyre International Threat Landscape Libya and again operations over Iraq and Syria.”8 The UK’s decision to leave the European Union has caused The United Kingdom (UK) is a permanent member of the concern amongst foreign policy analysts that believe the 2 United Nations Security Council , a founding member UK’s global diplomatic influence will decline because the 3 of the North Atlantic Treaty Organization (NATO) , the UK will no longer vote on decisions impacting the EU9. Council of Europe, the Organization for Security and Co-operation in Europe (OSCE), the Organisation for The UK has contributed to the war against ISIS in Iraq Economic Co-operation and Development (OECD), and and Syria and is home to a number of individuals who the World Trade Organisation (WTO), among others.
    [Show full text]
  • Cyber-Terrorism Activities Report No. 14 July – September 2015
    ICT Cyber-Desk PERIODIC REVIEW Cyber-Terrorism Activities Report No. 14 July – September 2015 International Institute for Counter Terrorism (ICT) Additional resources are available on the ICT Website: www.ict.org.il Highlights This report covers the period of July - September 2015 and covers two main subjects: cyber- terrorism (offensive, defensive, and the media, and the main topics of jihadist discourse) and cyber- crime, whenever and wherever it is linked to jihad (funding, methods of attack). The following are among the issues covered in this report: Islamic State supporters continued to publish and distribute guidebooks and informational materials on the topic of information security and maintaining anonymity online: “personal computer security”, “smart phone security”, how to post informational material on Twitter using several accounts simultaneously, how to inspect files and links infected with viruses, how to open a Twitter account without a cell phone number, how to use encrypted email, and more. During this period, we continued to see cooperation between players affiliated with the Islamic State, such as Cyber Caliphate, IS Hacking Division and ISIS Cyber Army, and hacker groups that began to identify with the organization. For instance, it was reported that a hacker named Ardit Ferizi stole personal details about US army and government personnel that he sent to members of the organization, who then leaked the information under the name “Cyber Caliphate”. Members and supporters of the Islamic State continued to hack Web sites and social networks, and leak the information obtained. During this period, we witnessed a “spam campaign” – a virtual campaign that called on Islamic State supporters to report Twitter accounts belonging to opponents of the organization as spam in order to have them closed.
    [Show full text]
  • July 18, 2017, Kaspersky Lab Letter To
    July 18, 2017 The Honorable John F. Kelly Secretary of Homeland Security U.S. Department of Homeland Security Washington, D.C. 20528 Dear Secretary Kelly: Given Kaspersky Lab’s longstanding commitment to transparency, the trustworthy development of its technologies and solutions, and cooperation with governments worldwide and the IT security industry to combat cyber threats, we write to offer any information or assistance we can provide with regards to any Department investigation regarding the company, its operations, or its products. Since its founding in 1997, Kaspersky Lab, as an IT security company, has abided by the highest ethical business standards to protect individual consumers, businesses of every size, and other enterprises from cyber threats, regardless of their origin or purpose. The company has no ties to any government, and as such, has never helped, nor will help, any government with cyberespionage or other cyber offensive efforts. In fact, Kaspersky Lab regularly works with the global IT security community, international organizations, international, national and regional law enforcement agencies,1 and Computer Emergency Response Teams (CERTs) worldwide to fight cybercrime, providing technical expertise and forensic malware analysis. Our Global Research and Analysis Team, which monitors and investigates over 100 advanced persistent threat (APT) actors and their campaigns, has publicly reported on more Russian-speaking cyber espionage campaigns2 than any other security company. We have a number of certifications from independent bodies verifying that our products are transparent and recommended for use by companies that deal with confidential and sensitive data. As a result, Kaspersky Lab technologies are trusted by more than 120 global technology and OEM partners.
    [Show full text]
  • Major Malware Threat Intelligence Report for Bangladesh Context
    Major Malware Threat Intelligence Report For Bangladesh Context Report Period: Jan - Sep, 2020 Published: October, 2020 Table of Contents About this Report .............................................................................................................................. 1 General Definition ............................................................................................................................. 2 Malware: AZORult ............................................................................................................................. 6 Malware: KPOT Stealer .................................................................................................................... 26 Malware: Oski Stealer...................................................................................................................... 31 Malware: FormBookFormgrabber.................................................................................................... 34 Malware: Loki PWS .......................................................................................................................... 38 Malware:Nexus Stealer.................................................................................................................... 44 Malware: TrickBot ........................................................................................................................... 46 Malware: Kinsing ............................................................................................................................
    [Show full text]
  • Download Indictment.Pdf
    1 2 3 12/8/2020 4 JB 5 6 7 8 UNITED STATES DISTRICT COURT 9 FOR THE CENTRAL DISTRICT OF CALIFORNIA 10 January 2020 Grand Jury 11 UNITED STATES OF AMERICA, CR 2:20-cr-00614-DMG 12 Plaintiff, I N D I C T M E N T 13 v. [18 U.S.C. § 371: Conspiracy; 18 U.S.C. § 1349: Conspiracy to 14 JON CHANG HYOK, Commit Wire Fraud and Bank Fraud; aka “Quan Jiang,” 18 U.S.C. §§ 982, 1030: Criminal 15 aka “Alex Jiang,” Forfeiture] KIM IL, 16 aka “Julien Kim,” aka “Tony Walker,” and 17 PARK JIN HYOK, aka “Jin Hyok Park,” 18 aka “Pak Jin Hek,” aka “Pak Kwang Jin,” 19 Defendants. 20 21 The Grand Jury charges: 22 INTRODUCTORY ALLEGATIONS AND DEFINITIONS 23 At times relevant to this Indictment: 24 A. The Conspiracy and Defendants 25 1. The Democratic People’s Republic of Korea (“DPRK”), also 26 known as (“aka”) North Korea, operated a military intelligence agency 27 called the Reconnaissance General Bureau (“RGB”). The RGB was 28 headquartered in Pyongyang, DPRK, and comprised multiple units. 1 2. Defendants JON CHANG HYOK (ࢷॷୂ), aka “Quan Jiang,” aka 2 “Alex Jiang”; KIM IL (̡ࢊ), aka “Julien Kim,” aka “Tony Walker”; and ऑୂ), aka “Jin Hyok Park,” aka “Pak Jin Hek,” aka؃) PARK JIN HYOK 3 4 “Pak Kwang Jin” (collectively, the “defendants”), whose photographs 5 are attached as Exhibit A through Exhibit C, respectively, were 6 members of units of the RGB who knowingly and intentionally conspired 7 with each other, and with persons known and unknown to the Grand Jury 8 (collectively, with the defendants, referred to as the “conspirators” 9 and the “hackers”), to conduct criminal cyber intrusions.
    [Show full text]