DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

UNC2970 (4)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
March 2023CSIS entry 246
2023-03-09 (datePublished)UNC2970 job-recruitment phishing against Western media and technology companies (since June 2022)U.S.-based; U.S. and EuropeanUNC2970 (suspected UNC577 / Temp.Hermit)
2024-09-17 (datePublished)UNC2970 trojanized SumatraPDF job lures (MISTPEN via BURNBOOK) against energy and aerospaceU.S.UNC2970
2026-02-10 (datePublished)UNC2970 defense targeting and Gemini-assisted target profilingUNC2970