DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

North Korean cyber actors (7)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
in or around August 2021Theft from COMPANY-1, a Japan-based virtual currency exchangeJapanNorth Korean cyber actors; Lazarus Group and APT38
January 13, 2023Laundering of Harmony proceeds via RAILGUNNorth Korean cyber actors
identified November 2023Wagemole campaign (fake identities for remote IT jobs)North Korean cyber actors
publication date not shown on page (covers activity since June 2023)North Korean cryptocurrency heists in 2023 (aggregate)North Korean cyber actors
in 2024North Korean cryptocurrency theft total for 2024 (citing MSMT report)North Korean cyber actors
On or about March 13, 2024Theft from online platform COMPANY-2 via malware deployed by CryptoMimic actors (funds traced to MEXC accounts)North Korean cyber actors; CryptoMimic actors
(not dated)Malicious cryptocurrency trading applications (AppleJeus, per footnote) targeting individuals and organizations including in CanadaCanadaNorth Korean cyber actors