{"id":17878,"date":"2020-08-26T18:01:19","date_gmt":"2020-08-26T18:01:19","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/"},"modified":"2026-08-08T17:57:43","modified_gmt":"2026-08-08T17:57:43","slug":"us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/","title":{"rendered":"US publicly blames North Korean cyber scheme in attempt to protect the private sector"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">WASHINGTON \u2014 The U.S. government Wednesday publicly disclosed an ongoing operation it is attributing to North Korean hackers who are targeting ATM machines around the world as part of a larger money-gathering scheme.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.cisa.gov\/news\/2020\/08\/26\/cisa-treasury-fbi-and-uscybercom-release-cyber-alert-latest-north-korea-bank\" target=_blank>The alert<\/a> was published jointly by the Cybersecurity and Infrastructure Security Agency within the Department of Homeland Security, the Treasury Department, the FBI and U.S. Cyber Command. The disclosure provides members of the private sector and public with new information about this cyber-enabled bank robbery scheme the hackers use to raise funds around the world as a means of skirting international sanctions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Along with in-depth technical analysis, detection and mitigation measures to counter the operations, and an overview of the North Korean entity alleged to be responsible, malware samples from the operation were publicly uploaded to VirusTotal for further analysis by anti-virus companies and other interested parties.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cOrganizations, specifically those in the financial services sector, should give this activity the highest priority for assessing their networks and implementing appropriate mitigation. If any aspect of this North Korean theft scheme is detected, it should be immediately reported to law enforcement, CISA or Treasury. Also, anyone with additional information about this malicious activity is encouraged to report it,\u201d a U.S. government release said. \u201cCollectively, the U.S. Government works every day to identify malicious activity, provide actionable mitigations and help organizations and sectors of our economy strengthen their cybersecurity against sophisticated, well-resourced adversaries.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Defending the nation<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In these disclosure efforts, Cyber Command has found a niche to contribute to defending the nation in cyberspace, a component of its mission that had been difficult for it and the Pentagon to define in years\u2019 prior.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For years, <a href=\"https:\/\/www.fifthdomain.com\/dod\/2019\/03\/01\/should-the-pentagon-help-protect-private-networks\/\" target=_blank>officials described<\/a> how the <a href=\"https:\/\/www.fifthdomain.com\/dod\/2019\/04\/24\/in-era-of-defend-forward-what-does-success-look-like\/\" target=_blank>Department of Defense and the command struggled<\/a> to find their identity in the vein of protecting U.S. assets from cyber incidents.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While the Pentagon would naturally work to protect a missile strike on a U.S. entity, given the pervasiveness of cyber activities throughout society and given that most networks are not owned by the government, the DoD\u2019s role in protecting the nation from foreign cyberthreats was less clear.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">From <a href=\"https:\/\/www.reuters.com\/article\/us-usa-iran-cyber\/u-s-indicts-iranians-for-hacking-dozens-of-banks-new-york-dam-idUSKCN0WQ1JF\" target=_blank>Iranian operations against U.S. banks<\/a> to the <a href=\"https:\/\/www.washingtonpost.com\/world\/national-security\/hack-at-sony-pictures-appears-linked-to-north-korea\/2014\/12\/03\/6c3c7e3e-7b25-11e4-b821-503cc7efed9e_story.html\" target=_blank>destruction of computers at Sony Pictures by North Korean hackers<\/a> to the <a href=\"https:\/\/www.cfr.org\/blog\/chinese-hackers-are-stealing-us-defense-secrets-here-how-stop-them\" target=_blank>Chinese theft of intellectual property<\/a>, the defense sector often struggled to find a lane in which to aide these companies, which were often up against the best of the best in cyberspace.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"4760\" height=\"3384\" src=\"\/wp-content\/uploads\/2026\/08\/200619-N-KT462-6060.JPG.jpg\" alt=\"\" class=\"wp-image-39602\" srcset=\"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200619-N-KT462-6060.JPG.jpg 4760w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200619-N-KT462-6060.JPG.jpg?resize=300,213 300w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200619-N-KT462-6060.JPG.jpg?resize=768,546 768w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200619-N-KT462-6060.JPG.jpg?resize=1024,728 1024w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200619-N-KT462-6060.JPG.jpg?resize=1536,1092 1536w, https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200619-N-KT462-6060.JPG.jpg?resize=2048,1456 2048w\" sizes=\"auto, (max-width: 4760px) 100vw, 4760px\" \/><figcaption class=\"wp-element-caption\">Ft Meade, MD &#8211; U.S. Cyber Command is employing a new virtual training platform, the Persistent Cyber Training Environment, during Cyber Flag 20-2. Over a period of two weeks, Cyber Flag 20-2 will host more than 500 personnel worldwide, spanning nine different time zones and 17 cyber teams. Participants include three allied nations, the Air National Guard, the Coast Guard, the U.S. Army Corps of Engineers, U.S. Postal Service, U.S. Dept. of Energy and multiple service cyber components across the DOD. (U.S. Cyber Command photo by Chief Mass Communication Specialist Jon Dasbach\/Released)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Now, <a href=\"https:\/\/www.fifthdomain.com\/dod\/2019\/11\/11\/two-years-in-how-has-a-new-strategy-changed-cyber-operations\/\" target=_blank>with the help of more streamlined authorities Congress and the White House<\/a>, Cyber Command has crafted a new approach using its unique authorities to operate against adversaries outside U.S. networks to help thwart potential attacks before they reach U.S. networks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWhen Cyber Command was established in 2010, the operative assumption was that its focus should be on trying to prevent the military\u2019s networks from being infiltrated or disabled. But a reactive and defensive posture proved inadequate to manage evolving threats,\u201d Gen. Paul Nakasone, head of the National Security Agency and Cyber Command, and Michael Sulmeyer, senior adviser to the commander, wrote in an <a href=\"https:\/\/www.foreignaffairs.com\/articles\/united-states\/2020-08-25\/cybersecurity\" target=_blank>Aug. 25 article in Foreign Affairs<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cyber Command achieves \u201c<a href=\"https:\/\/www.fifthdomain.com\/smr\/cybercon\/2019\/11\/12\/heres-how-cyber-command-is-using-defend-forward\/\" target=_blank>defend forward<\/a>\u201d through an approach it calls \u201cpersistent engagement.\u201d As part of this persistence, officials have said that success might not necessarily be solely acting, but rather enabling critical partners, such as tipping off the FBI or DHS about a cyberthreat or publicly disclosing malware discovered through operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cMuch of Cyber Command\u2019s combat power had been devoted toward preparations in the event of future contingencies. We realized that Cyber Command needs to do more than prepare for a crisis in the future; it must compete with adversaries today,\u201d Nakasone and Sulmeyer wrote.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThis doctrine of persistent engagement reflects the fact that one-off cyber operations are unlikely to defeat adversaries. Instead, U.S. forces must compete with adversaries on a recurring basis, making it far more difficult for them to advance their goals over time. For example, publicly releasing adversary malware obtained during <a href=\"https:\/\/www.fifthdomain.com\/dod\/2020\/02\/12\/how-hunt-forward-teams-can-help-defend-networks\/\" target=_blank>hunt forward<\/a> missions to the cybersecurity community makes that malware less effective because defenses can be tuned to detect and defeat it. Additionally, cyber effects operations allow Cyber Command to disrupt and degrade the capabilities our adversaries use to conduct attacks.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Though the \u201cdefend forward\u201d approach might appear offensive, it should be viewed as inherently defensive, noted Erica Borghard, assistant professor at the Army Cyber Institute and the lead for Task Force 1 on the Cyberspace Solarium Commission, a bipartisan organization created in 2019 to develop a multipronged U.S. cyber strategy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThe [Cyberspace Solarium] Commission\u2019s March 2020 report articulates how actions by U.S. military cyber forces that could be defined as offensive at the operational level \u2014 gaining access to and maneuvering within and across non-U.S. cyberspace \u2014 nevertheless are meant to serve defensive strategic objectives \u2014 enhancing the defense and resilience of the United States in cyberspace,\u201d Borghard <a href=\"https:\/\/www.cfr.org\/blog\/us-cyber-commands-malware-inoculation-linking-offense-and-defense-cyberspace\" target=_blank>wrote in April<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">She added that disclosing information on malware can serve defensive objectives by enabling network defenders to patch against ongoing tools used by adversaries, adding the commission recommended accelerating the pace of these malware inoculation efforts to provide the private sector more opportunities to protect their systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The point organization for much of this homeland defense in cyberspace is the Cyber National Mission Force.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWe know that North Korea uses cyber-enabled tactics and techniques to steal currency, which it would otherwise be denied under international sanctions. The Cyber National Mission Force is laser-focused on the away game \u2014 we understand what our adversaries are doing, and we share this information with our partners to take action against them,\u201d Brig. Gen. William Hartman, who commands Cyber National Mission Force, said regarding Wednesday\u2019s release.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/www.fifthdomain.com\/dod\/cybercom\/2019\/06\/19\/one-of-the-militarys-top-cyber-groups-will-get-a-new-leader\/\" target=_blank>Cyber National Mission Force<\/a> is one of Cyber Command\u2019s elite units aligned against specific threat actors, and it\u2019s charged with defending the nation in cyberspace.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An official told C4ISRNET that no other cyber teams outside of the Cyber National Mission Force \u2013 teams that conduct operations on behalf of the geographic combatant commands \u2013 contributed to this reporting.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Hartman described his force earlier this month during a virtual panel as part of DEFCON as \u201cthe U.S. government that focuses on the away game. We\u2019re looking at foreign adversaries: Russia, China, Iran, any other foreign adversary,\u201d and we\u2019re \u201clooking for them in foreign space.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A joint statement discloses an ongoing campaign targeting ATMs around the world, which the U.S. government has attributed to North Korea.<\/p>\n","protected":false},"author":7,"featured_media":26412,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":10,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[10,106,29,32],"tags":[],"coauthors":[3268],"class_list":["post-17878","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber","category-daily-brief","category-home","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"KPZC6LRXGVF6RHJ46FXJM6FNZU","arc_canonical_url":"\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>US publicly blames North Korean cyber scheme in attempt to protect the private sector - C4ISRNet<\/title>\n<meta name=\"description\" content=\"A joint statement discloses an ongoing campaign targeting ATMs around the world, which the U.S. government has attributed to North Korea.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"US publicly blames North Korean cyber scheme in attempt to protect the private sector\" \/>\n<meta property=\"og:description\" content=\"A joint statement discloses an ongoing campaign targeting ATMs around the world, which the U.S. government has attributed to North Korea.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2020-08-26T18:01:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T17:57:43+00:00\" \/>\n<meta name=\"author\" content=\"Mark Pomerleau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Pomerleau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"US publicly blames North Korean cyber scheme in attempt to protect the private sector\",\n\t            \"datePublished\": \"2020-08-26T18:01:19+00:00\",\n\t            \"dateModified\": \"2026-08-08T17:57:43+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/\"\n\t            },\n\t            \"wordCount\": 1162,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-676596180.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Cyber\",\n\t                \"Daily Brief\",\n\t                \"Home\",\n\t                \"Newsletters\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/\",\n\t            \"name\": \"US publicly blames North Korean cyber scheme in attempt to protect the private sector - C4ISRNet\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-676596180.jpg.jpg\",\n\t            \"datePublished\": \"2020-08-26T18:01:19+00:00\",\n\t            \"dateModified\": \"2026-08-08T17:57:43+00:00\",\n\t            \"description\": \"A joint statement discloses an ongoing campaign targeting ATMs around the world, which the U.S. government has attributed to North Korea.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-676596180.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-676596180.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2020\\\/08\\\/26\\\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Cyber\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/\",\n\t                    \"ad_zone\": \"cyber\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"US publicly blames North Korean cyber scheme in attempt to protect the private sector\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"caption\": \"C4ISRNet\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"US publicly blames North Korean cyber scheme in attempt to protect the private sector - C4ISRNet","description":"A joint statement discloses an ongoing campaign targeting ATMs around the world, which the U.S. government has attributed to North Korea.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"US publicly blames North Korean cyber scheme in attempt to protect the private sector","og_description":"A joint statement discloses an ongoing campaign targeting ATMs around the world, which the U.S. government has attributed to North Korea.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/","og_site_name":"C4ISRNet","article_published_time":"2020-08-26T18:01:19+00:00","article_modified_time":"2026-08-08T17:57:43+00:00","author":"Mark Pomerleau","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Mark Pomerleau","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"US publicly blames North Korean cyber scheme in attempt to protect the private sector","datePublished":"2020-08-26T18:01:19+00:00","dateModified":"2026-08-08T17:57:43+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/"},"wordCount":1162,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-676596180.jpg.jpg","articleSection":["Cyber","Daily Brief","Home","Newsletters"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/","name":"US publicly blames North Korean cyber scheme in attempt to protect the private sector - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-676596180.jpg.jpg","datePublished":"2020-08-26T18:01:19+00:00","dateModified":"2026-08-08T17:57:43+00:00","description":"A joint statement discloses an ongoing campaign targeting ATMs around the world, which the U.S. government has attributed to North Korea.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-676596180.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-676596180.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/08\/26\/us-publicly-blames-nkorean-cyber-money-scheme-in-attempt-to-protect-the-private-sector\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Cyber","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/","ad_zone":"cyber"},{"@type":"ListItem","position":3,"name":"US publicly blames North Korean cyber scheme in attempt to protect the private sector"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-676596180.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/17878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=17878"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/17878\/revisions"}],"predecessor-version":[{"id":17884,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/17878\/revisions\/17884"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=17878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=17878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=17878"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=17878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}