Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Government

Leader of North Korean Hackers Sanctioned by EU

The EU has announced new sanctions against entities aiding Russia’s war against Ukraine, including an individual who leads North Korean hackers.

Australia sanctions North Korean hackers

The European Union has announced new sanctions against entities aiding Russia’s war against Ukraine, including an individual who serves as a leader of North Korean hackers.

A majority of the sanctioned entities are Russian companies and nationals, but there are also a handful of Chinese and North Korean nationals. 

One of the North Koreans targeted by the EU’s sanctions is Lee Chang Ho, lieutenant general in North Korea’s Army, and head of North Korea’s Reconnaissance General Bureau, an intelligence agency known to house hacker units specializing in cyberespionage and financial crime. 

The EU motivated the decision to sanction Lee Chang Ho by saying that he coordinated North Korean soldiers deployed on the battlefield in Ukraine, and he led cyberattack units such as Lazarus and Kimsuky.

“Therefore, Lee Chang Ho is responsible for supporting and implementing actions which undermine the independence of Ukraine,” the EU said.

The US designated Lee Chang Ho in December 2024 as part of sanctions targeting key facilitators of North Korea’s illicit financial activities and military support to Russia. 

Advertisement. Scroll to continue reading.

Recent US sanctions also targeted entities supporting North Korea’s fake IT worker scheme.

North Korean hackers, specifically the Lazarus group, are believed to be behind the $1.5 billion Bybit cryptocurrency heist that came to light over the weekend. 

Related: Freelance Software Developers in North Korean Malware Crosshairs

Related: North Korean Fake IT Workers More Aggressively Extorting Enterprises

Related: US Charges Five People Over North Korean IT Worker Scheme

Related: US, Japan, South Korea Blame North Korean Hackers for $660M Crypto Heists

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Jeremy Rosenberg has become CISO at MIT.

Keyfactor has named Gerald Beuchelt as CISO.

DNSFilter has appointed Justin Foster as CTO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.