Park Jin Hyok
A North Korean programmer the US blames for the Sony hack, the Bangladesh Bank heist and WannaCry.
Park Jin Hyok was charged by the US Department of Justice in September 2018, the first indictment of a named North Korean state hacker. According to the charges he worked for Chosun Expo, a front company with an office in Dalian, China, that sold programming services to the outside world and gave cover to the Lazarus Group on the inside.
The indictment tied him to the 2014 Sony Pictures breach, the theft of $81 million from Bangladesh's central bank over SWIFT in 2016, and the WannaCry ransomware worm in 2017. The evidence rested on reused email accounts, IP addresses and code fragments – the same sloppiness that makes APT attribution possible at all. In 2021 the case was expanded with two colleagues and cryptocurrency thefts. None of them is expected ever to see a US courtroom.