UK, U.S., South Korea warn of cyber op by North Korea to steal military, nuclear secrets

Andariel cyber espionage group linked to North Korea targets defence, aerospace, nuclear sectors worldwide, prompting global warnings.

Britain, the United States and South Korea on July 26 issued a warning over a North Korea-backed global cyber espionage campaign to further the country's nuclear ambitions.

Law enforcement and intelligence agencies said that a group known as Andariel "has been compromising organisations around the world to steal sensitive and classified technical information and intellectual property data."

Andariel has been identified as an arm of Pyongyang's spy agency, and working "to further the regime's military and nuclear ambitions," the UK National Cyber Security Centre said.

Defence, aerospace, nuclear and engineering organisations have mainly been targeted, as well as medical and energy providers, some of which have been hit by ransomware attacks.

"The global cyber espionage operation that we have exposed today shows the lengths that DPRK-state-sponsored actors are willing to go to pursue their military and nuclear programmes," said NCSC director of operations Paul Chichester, referring to the secretive communist state.

"It should remind critical infrastructure operators of the importance of protecting the sensitive information and intellectual property they hold on their systems to prevent theft and misuse."

In a separate advisory, the US Federal Bureau of Investigation said Andariel, which is known by a variety of names, "remain(s) an ongoing threat to various industry sectors worldwide."