DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

APT38 (20)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
2018-10-03 (datePublished)APT38 financial crime against banks worldwide (since at least 2014)at least 13 countriesAPT38
30.7.2020 (date of listing)“WannaCry”APT38 / Lazarus Group (Chosun Expo)
(listing 30.7.2020)Cyber-attacks against the Polish Financial Supervision AuthorityPolandChosun Expo; APT38 / Lazarus Group
30.7.2020 (date of listing)cyber-attacks against … Sony Pictures EntertainmentAPT38 / Lazarus Group (Chosun Expo)
30.7.2020 (date of listing)cyber-theft from the Bangladesh BankAPT38 / Lazarus Group (Chosun Expo)
(listing 30.7.2020)Attempted cyber-theft from the Vietnam Tien Phong BankVietnamChosun Expo; APT38 / Lazarus Group
since at least 2020; As of April 2022TraderTraitor campaign against blockchain and cryptocurrency firmsLazarus Group; TraderTraitor; APT38
01.11.2021BlueNoroff hackers steal crypto using fake MetaMask extensionUnited States;Russia;China;India;United Kingdom;Ukraine;Poland;Czech Republic;United Arab Emirates;GermanyBlue Noroff/APT38/Stardust Chollima/G0082/Sapphire Sleet fka COPERNICUM/Genie Spider < Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
02.09.2022Financially-motivated hacker group BlueNoroff compromised a company employee in the United Arab Emirates beginning in September 2022United Arab EmiratesBlue Noroff/APT38/Stardust Chollima/G0082/Sapphire Sleet fka COPERNICUM/Genie Spider < Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
November 2023Theft of approximately $138 million from a Panama-based virtual currency exchangePanamaAPT38
July 2023Theft of approximately $100 million from a Panama-based virtual currency payment processorPanamaAPT38
November 2023Theft of approximately $107 million from a Seychelles-based virtual currency exchangeSeychellesAPT38
2023-02-15Anti-Forensic Techniques Used By Lazarus GroupAPT38; Kimsuky; Lazarus
2023-10-15起底朝鲜黑客组织Lazarus Group的攻击手法及洗钱模式_腾讯新闻Lazarus; APT38
2024-04Rain.comBahamasAPT38
March 2025FBI seizure of USDT from APT38 actors (forfeiture complaints)APT38
2025-02-12 (datePublished)APT38 thefts from financial institutions incl. SWIFT compromisesworldwideAPT38
2026-05-212026년 4월 국내외 금융권 관련 보안 이슈APT38; Andariel; BlueNoroff
2026-07-142026년 6월 APT 그룹 동향 보고서APT37; APT38; Kimsuky; Lazarus; TA-RedAnt
2026-08-202026년 7월 APT 그룹 동향 보고서APT38; BlueNoroff; Kimsuky