DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

KAMS

Date (as written)
2020-07
Year
2020
Country
Korea, Republic of
Actor pages
Lazarus Group
Tags (as written)
DataBreach Healthcare Wateringhole

Source entries (2)

lazarus.day

KAMS · 2020-07
The KAMS incident involved a malicious HWP document distributed through a notice associated with the Korea healthcare sector, with linked metadata classifying the activity as a watering-hole-style compromise and data-breach event. The available evidence supports a Korea-focused healthcare intrusion but does not identify a specific DPRK actor.
https://lazarus.day/incidents/kams/

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

KAMS · 2020-07
Reported: 2020-07; Victims: KAMS; Motivations: DataBreach Wateringhole; Sectors: Healthcare; Countries: Korea, Republic of
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Values found later for empty fields

actors: Lazarus Group (per IssueMakersLab)
IssueMakersLab reported that North Korea's Lazarus Group registered a malicious HWP document in a Korean Academy of Medical Sciences website notice.
https://lazarus.day/reports/malicious-hwp-document-in-a-notice-on-the-kams-hQBBr/

Suggest a correction on GitHub