DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

hackers (18)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
On December 2 and 3, 2014Spear-phishing of AMC Theatres employeesU.S.JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
At an unknown date in 2015Unauthorized access to Mammoth Screen computersUnited KingdomJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
On December 9, 2015Fraudulent wire transfers from the Vietnamese BankVietnamJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
Beginning in or around November 2015Intrusion at the Philippine Bank (no fraudulent transfers)PhilippinesJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
On July 20, 2016Fraudulent wire transfers from the African BankAfricaJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
On August 24, 2017Ransomware and extortion of a victim companyJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
On October 13, 2017Extortion of Central American Online Casino 1 after theft of customer informationCentral AmericaJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
On November 2, 2017Extortion of Central American Online Casino 2 after theft of customer informationCentral AmericaJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
On December 15, 2017Theft from Slovenian Cryptocurrency Company (crypto-mining company, Ljubljana)SloveniaJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
Beginning in February 2017 and continuing through May 2017Spear-phishing of U.S. cleared defense contractorsU.S.JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
Beginning in March 2018Spear-phishing of employees of cryptocurrency exchangesJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
Beginning on or before October 11, 2018WorldBit-Bot malicious cryptocurrency applicationJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
Beginning on November 14, 2018WorldBit-Bot advertised to cryptocurrency exchange employeesJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
Beginning on or before March 6, 2019iCryptoFx malicious cryptocurrency applicationJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
Beginning on April 27, 2019Fake employee personas for iCryptoFxJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
In November 2019Spear-phishing of U.S. Department of State employeesU.S.JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
Beginning on or before May 6, 2020CryptoNeuro Trader malicious cryptocurrency applicationJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
In January and February 2020Spear-phishing of U.S. Department of State, Department of Defense, and U.S. technology companiesU.S.JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)