A U.S. cloud company with suspected ties to Iran allowed North Korean hackers to exploit its servers to orchestrate attacks and extort money from victims, cybersecurity researchers allege in a new report.

The report by U.S. cybersecurity firm Halcyon states that Cloudzy, an internet services provider based in Wyoming, has been granting anonymous access to its infrastructure to threat actors, including those from the DPRK, in exchange for cryptocurrency payments. 

Halcyon identified at least four North Korean hacking groups, including the infamous Kimsuky threat group, that “leveraged” or “abused” Cloudzy’s servers to