DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

DPRK Cyber Index

A compiled list of cyber activity attributed to North Korea, recorded as each source published it. Nothing here is a finding, ranking or verdict: every date, amount, name and attribution is copied as written, with the source and its own words.

2,472 events · 23 attacks on North Korea (kept separate) · Search · Read the methodology first

By year

2004 (1)2005 (1)2007 (3)2009 (3)2010 (2)2011 (8)2012 (6)2013 (16)2014 (14)2015 (14)2016 (49)2017 (99)2018 (140)2019 (140)2020 (176)2021 (171)2022 (246)2023 (358)2024 (356)2025 (306)2026 (203)undated (160)

By actor name, as written by sources

Kimsuky (306)Lazarus (199)Lazarus Group (187)김수키 (98)Andariel (89)APT37 (70)Labyrinth Chollima (69)라자루스 (68)ScarCruft (65)Sapphire Sleet (62)Bluenoroff (56)Contagious Interview (50)HIDDEN COBRA (50)Hidden Cobra (49)SquidSquad - UNC1069 (48)KONNI (47)Reaper (46)탈륨 (39)APT 37 (34)코니 (34)Appleworm (33)Diamond Sleet fka ZINC (33)G0032 (33)Group 77 (33)Guardians of Peace (33)NewRomanic Cyber Army Team (33)NICKEL ACADEMY (33)Thallium (33)Whois Hacking Team (33)Ricochet Chollima (32) All actor names

Browse by source · Source descriptions