DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

DPRK cyber actors (16)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
In December 2017GCSB statement of concern about DPRK cyber actors' involvement in WannaCryDPRK cyber actors
2019-07CoinTigerSingapore
2022DPRK virtual currency theft total for 2022 (public reporting)DPRK cyber actors
2022DPRK virtual currency theft in 2022 (UN Panel of Experts estimate)DPRK cyber actors
since at least December 2022 (identified November 2023)Contagious Interview campaign (BeaverTail, InvisibleFerret)DPRK cyber actors
February 09, 2023DPRK ransomware attacks on Healthcare and Public Health and other critical infrastructureDPRK cyber actors
on or about July 22, 2023; on or about June 2, 20232023 thefts: Alphapo/CoinsPaid and Atomic Wallet (DPRK total more than $200 million in 2023)DPRK cyber actors
June 2023Atomic Wallet, Coinspaid, and Alphapo thefts (laundered via Huione Pay)DPRK cyber actors
December 2024Targeting of James Tang of Fenbushi Capital with fake meeting linksChinaDPRK cyber actors
2024Attempted sale of stolen data (NASA, a private U.S. company, UAE government, Spanish healthcare group, Austria-based jet charter) to Stormous ransomware groupUnited States; UAE; Spain; AustriaDPRK cyber actors (alias linked to Moonstone Sleet’s FakePenny)
February 2025ClickFake Interview campaign (ClickFix tactic; GolangGhost, FrostyFerret)DPRK cyber actors (Lazarus, per Sekoia source title)
Mayhttps://www.police.go.kr/viewer/skin/doc.html?fn=d6c2795c-3930-44ab-970d-d2d7a14f9571.hwpx&rs=/viewer/202305 (see S/2023/656 Annex 65)DPRK cyber actors (suspected Kimsuky)
SeptemberActive North Korean campaign targeting security researchersDPRK cyber actors
November보도자료 : HOME > 알림 /소식 > 알림 > 보도자료 (police.go.kr)DPRK cyber actors
Novemberhttps://asec.ahnlab.com/ko/58818/DPRK cyber actors
(no date on page)DPRK Sanctions Violations in Cyber Operations Post UN Panel Demise (2024 cryptocurrency theft; Bybit; DMM Bitcoin)North Korean hackers; DPRK cyber actors