DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

MGNR

Date (as written)
2021-10
Year
2021
Country
United States
Actors (as written)
Bluenoroff
Actor pages
Bluenoroff
Tags (as written)
FinancialGain Cryptocurrency
Dollar figures (as written)
$24,100,000; 24.1m

Source entries (4)

lazarus.day

MGNR · 2021-10
MGNR disclosed that it was hit by a malicious and targeted cyberattack in which the likely entry point was a phishing email impersonating a recognized sender and carrying a fake document. The intrusion was believed to have installed a keylogger and stolen password-manager credentials for a temporary shared hot wallet private key, with the attackers showing scripting capability and facility with cross-chain bridging and mixing techniques; later blockchain analysis associated MGNR with a Lazarus/Bluenoroff-linked cryptocurrency laundering cluster.
https://lazarus.day/incidents/mgnr/

tayvano/lazarus-bluenoroff-research

MGNR · 2021-10-08
Amt Stolen: $24,100,000
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/mgnr.md

UN Panel of Experts S/2024/215

MGNR · 8 October 2021
Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2021: Victim: MGNR; Date: 8 October; Amount (USD equivalent): 24.1m; Location: unidentified
https://undocs.org/S/2024/215

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

MGNR · 2021-10
Reported: 2021-10; Victims: MGNR; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: United States
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Suggest a correction on GitHub