BlueNoroff (16)
Events whose actors field, as written by the source, names this.
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| since March 2020 | VHD, BEAF, PXJ, ZZZZ and ChiChi ransomware | BlueNoroff (also known as APT38) (code similarities) | |
| April 21 2023 (dateCreated 2023-04-21) | 'RustBucket' malware targets macOS | BlueNoroff (sub-group of Lazarus Group) | |
| 6 November 2023 | “BlueNoroff strikes again with new macOS malware,” Jamf Threat Labs | BlueNoroff | |
| September 27 2023 | macOS Threat Hunting: Unraveling RustBucket Malware Tactics (JNUC talk) | Lazarus APT group; BlueNoroff | |
| 29/06/2023 | Multiple organizations | >1 | BlueNoroff (part of the Lazarus Group) |
| 08/11/2023 | IT Job Seekers | >1 | BlueNoroff (AKA APT38, Sapphire Sleet, CageyChameleon, and CryptoCore) |
| April 2023; June 2023 (updated version) | RustBucket macOS malware | BlueNoroff | |
| 16/08/2024 | Blockchain engineers | >1 | BlueNoroff |
| 2025-01-14T00:00:00.000Z | ‘JustJoin’ Landing Page Linked to Suspected DPRK Activity Resurfaces | TA444/BlueNoroff | |
| 2026-04-27T11:59:23+00:00 | BlueNoroff Uses ClickFix, Fileless PowerShell, and AI-Generated Fake Zoom Meetings to Target Web3 Sector | North America | BlueNoroff (subgroup of Lazarus Group) |
| 2026-03-12 | 2026년 2월 APT 그룹 동향 보고서 | APT37; BlueNoroff; Lazarus; TA-RedAnt; 라자루스 | |
| 2026-05-21 | 2026년 4월 국내외 금융권 관련 보안 이슈 | APT38; Andariel; BlueNoroff | |
| 2026-08-20 | 2026년 7월 APT 그룹 동향 보고서 | APT38; BlueNoroff; Kimsuky | |
| April | bluenoroff-apt-targets-macos-rustbucket-malware/ | BlueNoroff | |
| October | security-insider/microsoft-digital-defense-report-2023?rtc=1 | Lazarus/ Andariel/ BlueNoroff | |
| November | Microsoft: BlueNoroff hackers plan new crypto-theft attacks | BlueNoroff |