Share this article

US Justice Department Seizes $500K in Ransom Payments and Crypto From North Korean Hackers

Deputy Attorney General Lisa Monaco said the FBI has identified a new type of ransomware used by the state-sponsored hackers.

Updated May 11, 2023, 5:22 p.m. Published Jul 19, 2022, 3:36 p.m.
Department of Justice (Getty Images)
Department of Justice (Getty Images)

The U.S. Justice Department has seized about $500,000 in ransom payments and cryptocurrencies from North Korean government-backed hackers, U.S. Deputy Attorney General Lisa Monaco said in a speech at Fordham University in New York on Tuesday.

  • U.S. officials believe the hackers either extorted the money from U.S.-based health care organizations or used the money to launder ransom payments.
  • The North Korean hackers targeted medical providers in Kansas and Colorado last year, encrypting computer systems that operated key equipment, Monaco said. The incidents came to the attention of U.S. officials when an unnamed medical provider in Kansas reported them to the FBI.
  • The Kansas complaint helped the FBI identify a new type of ransomware used by the North Koreans and allowed the bureau to seize ransom payments and cryptocurrencies from China-based money launderers hired by the North Koreans, according to Monaco. She urged other U.S. organizations and companies to report similar incidents to the FBI.
  • The seizures were aided by investments that the FBI, Secret Service and Treasury Department have made in tracking crypto payments to cybercriminal groups, according to Monaco.
  • Earlier this year, the FBI assembled a new task force of cryptocurrency experts that focuses on blockchain analysis and digital money seizures.
  • In March, the U.S. government linked North Korean state-sponsored hacker Lazarus Group to a $625 million theft of cryptocurrency from the Ronin bridge linked to popular play-to-earn game Axie Infinity.

UPDATE (July 19, 20:48 UTC): Took 'Report' out of the headline and linked to Monaco's speech in the first paragraph.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the State of Crypto Newsletter today. See all newsletters

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Argentina’s Central Bank to Allow Banks to Provide Crypto Services in 2026

Flag of Argentina (Angelica Reyes/Unsplash/Modified by CoinDesk)

Argentina’s central bank is reportedly drafting new rules to allow banks to offer customers digital asset-related services as early as April 2026.

What to know:

  • The Central Bank of Argentina is considering lifting the ban on banks offering cryptocurrency services, potentially implementing new rules by April 2026.
  • Argentina's shift towards a crypto-friendly policy follows the election of Javier Milei and aims to boost adoption amid economic challenges.
  • Argentina is a leading country in cryptocurrency adoption, with a significant portion of transactions involving stablecoins to hedge against inflation.