Jon Chang Hyok
Jon Chang Hyok (Korean: 전창혁;[1] born 1989) is a North Korean military intelligence officer and alleged cyber operative affiliated with the Reconnaissance General Bureau (RGB), the country's primary intelligence agency. He is one of three North Korean nationals charged by the United States in 2021 for orchestrating a series of state-sponsored cyberattacks across the globe.[2]
Biography
According to the U.S. Department of Justice, Jon Chang Hyok was born in North Korea and is believed to be a member of the country’s military intelligence apparatus. He reportedly traveled to China at times.[2]
Jon Chang Hyok is believed to be an officer in the Reconnaissance General Bureau (RGB), the agency responsible for North Korea’s cyber-espionage and cyber-sabotage campaigns. He has been identified as a member of Lazarus Group, a cybercrime unit widely attributed to the North Korean state.[3][4]
In February 2021, a U.S. federal indictment accused Jon and two co-conspirators, Park Jin Hyok and Kim Il, of engaging in a cybercrime campaign intended to steal and extort over $1.3 billion in cash and cryptocurrency from institutions in the United States and around the world.[5][6][7]
Notable operations
Sony Pictures Hack (2014)
Jon is believed to have been involved in the 2014 hack of Sony Pictures Entertainment, an attack attributed to North Korea in retaliation for the film The Interview, a comedy depicting a fictional assassination of Kim Jong Un. The attack resulted in the leaking of confidential data, unreleased films, and internal emails, and caused significant damage to Sony’s operations.[8]
WannaCry Ransomware (2017)
The indictment also links him to the WannaCry 2.0 ransomware attack that infected hundreds of thousands of computers across 150 countries. The malware encrypted victims’ data and demanded payment in Bitcoin for decryption. The attack notably impacted the UK's National Health Service (NHS), among other entities.[9]
Bank and Cryptocurrency Heists
The hackers attempted to steal over $1 billion from banks via the SWIFT system, including the 2016 Bangladesh Bank hack, where $81 million was successfully stolen. They also targeted cryptocurrency exchanges and financial technology companies, stealing hundreds of millions in digital currency.[10]
Legal Status
As of 2025, Jon Chang Hyok remains at large. He has been designated a fugitive by the U.S. Department of Justice and is featured on the FBI’s Cyber Most Wanted list. The indictment against him was unsealed in the U.S. District Court in Los Angeles.[2][11]
References
- ^ "미국이 북한인 3명을 1.4조원 규모 절도 혐의로 기소했다". BBC News 코리아 (in Korean). 2021-02-18. Retrieved 2025-05-10.
- ^ a b c "JON CHANG HYOK". Federal Bureau of Investigation. Retrieved 2025-05-09.
- ^ "US charges three North Koreans for major hacks and cyber-thefts". Al Jazeera. Retrieved 2025-05-09.
- ^ AFP (2021-02-17). "US charges three North Korean hackers over $1.3bn cryptocurrency attacks". The Guardian. ISSN 0261-3077. Retrieved 2025-05-09.
- ^ Makar, A. B.; McMartin, K. E.; Palese, M.; Tephly. "Formate assay in body fluids: application in methanol poisoning". Biochemical Medicine. 13 (2): 117–126. doi:10.1016/0006-2944(75)90147-7. ISSN 0006-2944. PMID 1.
- ^ "US charges three North Koreans over $1.3bn theft". 2021-02-17. Retrieved 2025-05-09.
- ^ Nakashima, Ellen (2021-02-17). "U.S. accuses three North Koreans of conspiring to steal more than $1.3 billion in cash and cryptocurrency". The Washington Post. ISSN 0190-8286. Retrieved 2025-05-09.
- ^ Anderson, T. R.; Slotkin, T. A. (1975-08-15). "Maturation of the adrenal medulla--IV. Effects of morphine". Biochemical Pharmacology. 24 (16): 1469–1474. doi:10.1016/0006-2952(75)90020-9. ISSN 1873-2968. PMID 7.
- ^ "U.S. Charges 3 North Korean Hackers Over $1.3 Billion Cryptocurrency Heist". The Hacker News. Retrieved 2025-05-09.
- ^ Benner, Katie (2021-02-17). "U.S. Charges 3 North Koreans With Hacking and Stealing Millions of Dollars". The New York Times. ISSN 0362-4331. Retrieved 2025-05-09.
- ^ Chow, Y. W.; Pietranico, R.; Mukerji, A. (1975-10-27). "Studies of oxygen binding energy to hemoglobin molecule". Biochemical and Biophysical Research Communications. 66 (4): 1424–1431. doi:10.1016/0006-291x(75)90518-5. ISSN 0006-291X. PMID 6.