Chosun Expo (7)
Events whose actors field, as written by the source, names this.
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| approximately October 26, 2016 | Watering hole on website of a "South American Bank" | South America | PARK JIN HYOK and co-conspirators ("subjects"); Chosun Expo; "Lazarus Group" |
| 2016-2017 (LinkedIn invitations from March 12, 2016; spear-phishing February 6 and 23, 2017) | Targeting of defense contractors including Lockheed Martin (THAAD prime contractor) and aerospace companies in the U.S. and Israel | U.S.; Israel | PARK JIN HYOK and co-conspirators ("subjects"); Chosun Expo; "Lazarus Group" |
| (listing 30.7.2020) | Cyber-attacks against the Polish Financial Supervision Authority | Poland | Chosun Expo; APT38 / Lazarus Group |
| (listing 30.7.2020) | Attempted cyber-theft from the Vietnam Tien Phong Bank | Vietnam | Chosun Expo; APT38 / Lazarus Group |
| Intrusion at the "Southeast Asian Bank" | Southeast Asia | PARK JIN HYOK and co-conspirators ("subjects"); Chosun Expo; "Lazarus Group" | |
| Spear-phishing and social engineering of South Korean companies and government entities; reconnaissance of U.S. and South Korean military | South Korea | PARK JIN HYOK and co-conspirators ("subjects"); Chosun Expo; "Lazarus Group" | |
| (sanction listing) | Chosun Expo identified for facilitating WannaCry; sanctioned under UK cyber regime | Chosun Expo (linked to Lazarus Group) |