US cuts North Korea's cyber hacking revenue source

The US Treasury has cut some of the North Korean regime's access to funds by announcing sanctions on three hacking groups it said were involved in the "WannaCry" ransomware attacks and hacking of bank accounts and online gambling sites.

It named the groups as Lazarus Group, Bluenoroff and Andariel, and said they were controlled by the RGB, North Korea's primary intelligence bureau, which is already subject to US and United Nations sanctions.

Employees watch electronic boards to monitor possible WannaCry ransomware cyber attacks at the Korea Internet and Security Agency in Seoul, South Korea.

It stated the Lazarus Group was involved in the WannaCry ransomware attack that the United States, Australia, Canada, New Zealand and the United Kingdom publicly attributed to North Korea in December 2017.

It said WannaCry affected at least 150 countries and shut down about 300,000 computers, including many in Britain's National Health Service. The NHS attack led to the cancellation of more than 19,000 appointments and ultimately cost the service more than $US112 million, the biggest known ransomware attack in history.

The action blocks any US-related assets of the groups and prohibits dealings with them. The Treasury statement said any foreign financial institution that knowingly facilitated significant transactions or services for them could also be subject to sanctions.

"Treasury is taking action against North Korean hacking groups that have been perpetrating cyber attacks to support illicit weapon and missile programs," said Sigal Mandelker, Treasury under-secretary for Terrorism and Financial Intelligence.

"We will continue to enforce existing US and UN sanctions against North Korea and work with the international community to improve cyber security of financial networks."

The US has been attempting to restart talks with North Korea, aimed at pressing the country to give up its nuclear weapons. The talks have been stalled over North Korean demands for concessions, including sanctions relief.

The Treasury said Lazarus Group was also directly responsible for 2014 cyber attacks on Sony Pictures Entertainment.

The statement cited industry and press reporting as saying that by 2018, Bluenoroff had attempted to steal more than $US1.1 billion from financial institutions and successfully carried out operations against banks in Bangladesh, India, Mexico, Pakistan, Philippines, South Korea, Taiwan, Turkey, Chile, and Vietnam.

It said Bluenoroff worked with the Lazarus Group to steal approximately $US80 million from the Central Bank of Bangladesh's New York Federal Reserve account.

Andariel, meanwhile, was observed by cyber security firms attempting to steal bank card information by hacking into ATMs to withdraw cash or steal customer information to later sell on the black market, the statement said.

Andariel was also responsible for developing and creating unique malware to hack into online poker and gambling sites and, according to industry and press reporting, targeted the South Korea government in an effort to gather intelligence, it said.