iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The U.S. government is offering up to $10 million for information that helps identify or locate people involved in certain foreign-government-directed cyber activity against U.S. critical infrastructure. The FBI’s wanted notice includes North Korean national Rim Jong Hyok in that offer. U.S. authorities accuse him of helping use ransomware against healthcare organizations and laundering ransom proceeds to support cyber espionage; the cited official notices report charges and an arrest warrant, not a conviction.
What is the $10 million reward for?
The FBI says the maximum reward is part of a broader Rewards for Justice offer for information leading to the identification or location of people involved in specified cyber activity directed or controlled by a foreign government, targeting U.S. critical infrastructure and violating the Computer Fraud and Abuse Act. Rim Jong Hyok is named in the notice, but the offer’s stated scope is not limited to him. See the FBI wanted notice for its current wording and reporting details.
The State Department announced the offer on July 25, 2024, describing Rim as a North Korean national associated with Andariel, which it said is controlled by North Korea’s Reconnaissance General Bureau. That announcement is archived, so it documents the government’s 2024 announcement rather than necessarily reflecting every current program detail. The live FBI notice is the better source for current wanted-page language.
Who is Rim Jong Hyok?
The FBI’s notice says: “Rim Jong Hyok is a North Korean citizen last known to be in North Korea.” The FBI describes him as a member of Andariel and alleges that he conspired on behalf of North Korea’s Reconnaissance General Bureau. Those are U.S. authorities’ characterizations and allegations, not findings of guilt.
#1 Best Overall
What do U.S. authorities allege he did?
The FBI and Justice Department allege that Rim and co-conspirators used Maui ransomware in intrusions against U.S. hospitals and other healthcare organizations, demanded ransom, laundered proceeds, and used the money to buy servers for further espionage intrusions. The FBI also describes alleged espionage targets in the United States, South Korea, and China. These accounts describe allegations made by U.S. authorities, not adjudicated facts.
The State Department’s July 25, 2024 announcement said investigators documented Andariel actors victimizing five healthcare providers and four U.S.-based defense contractors, among other organizations. Those are counts reported in that announcement, not a total measure of the group’s activity.
The Justice Department reported that it interdicted approximately $114,000 in virtual-currency proceeds from ransomware attacks and related laundering transactions, and seized online accounts used by co-conspirators. It also said the FBI had previously seized approximately $500,000 in virtual-currency proceeds. These figures refer to specific government-reported seizure actions; they are not totals for victim losses, all ransom proceeds, or all activity attributed to Andariel.
What is the case’s legal status?
The FBI says a federal arrest warrant was issued on July 24, 2024, by the U.S. District Court for the District of Kansas. The listed charges are conspiracy to commit computer hacking and conspiracy to commit promotion money laundering. The Justice Department’s July 25, 2024 announcement also described disruption actions. The cited notices report charges and a warrant, but do not report a conviction. As the Justice Department states, “All defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law.”
Rank #3
How can I report information?
If you have relevant information, use the channels listed on the FBI wanted notice. It directs people to contact a local FBI office or the nearest U.S. embassy or consulate and provides an anonymous online tip option. The multi-agency advisory also says information about illicit North Korean activity in cyberspace may be eligible for a reward through the Department of State’s Rewards for Justice program; consult its official page for the submission process and current terms.
Do not approach or contact a suspected person, attempt to investigate, or access systems. Submit information through official channels. The existence of a reward offer does not establish that a particular tip qualifies or guarantee payment, anonymity beyond the channel’s stated option, or other assistance.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What can organizations do to reduce related cyber risk?
A joint government advisory on Andariel activity recommends practical defensive measures. It does not endorse a particular product.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Protect remote access: Require multifactor authentication for remote access.
- Limit spread: Segment networks so an intrusion in one area does not automatically grant access to critical systems; use allow-listing for critical assets.
- Improve detection: Monitor for suspicious command-line activity that may indicate malicious execution.
For the advisory’s full technical context and recommendations, see the joint cybersecurity advisory.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
