DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Bank of Valletta

Date (as written)
2019-02
Year
2019
Country
Malta
Actor pages
Lazarus Group and Advanced Persistent Threat 38
Tags (as written)
Finance SWIFT FinancialGain
Dollar figures (as written)
14.5M USD; approximately $6.4 million and €7.1 million; $6.4 million

Source entries (7)

lazarus.day

Bank of Valletta · 2019-02
Bank of Valletta was identified in UN and U.S. law-enforcement reporting as a 2019 Maltese bank cyber-heist tied to North Korean cyber-enabled financial crime. The linked evidence places the case within DPRK/RGB-directed operations involving SWIFT-enabled bank theft, laundering of stolen proceeds, and broader sanctions-evasion revenue generation targeting financial institutions and cryptocurrency entities.
https://lazarus.day/incidents/bankofvalletta/

UN Panel of Experts S/2019/691

Attempted theft of 14.5M USD from the Bank of Valletta (BOV) on 13 February. Before being reversed, transfers · Feb 2019
Annex 21: Suspected DPRK cyber-attacks on financial institutions (including banks and cryptocurrency exchanges) investigated by the Panel. A. Banks. Attempted theft of 14.5M USD from the Bank of Valletta (BOV) on 13 February. Before being reversed, transfers were made to banks located in the UK, the US, Czech Republic, and Hong Kong, China. "phishing" activity using the same digital fingerprint had been detected since October 2018.
https://undocs.org/S/2019/691

US DOJ press release 2021-02-17 (Jon Chang Hyok, Kim Il, Park Jin Hyok indictment)

Cyber-enabled heist from a Maltese bank · February 2019
Alaumary also conspired with Ramon Olorunwa Abbas, aka "Ray Hushpuppi," and others to launder funds from a North Korean-perpetrated cyber-enabled heist from a Maltese bank in February 2019.
https://www.justice.gov/opa/pr/three-north-korean-military-hackers-indicted-wide-ranging-scheme-commit-cyberattacks-and

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Bank of Valletta · 2019-02
Reported: 2019-02; Victims: Bank of Valletta; Motivations: FinancialGain; Sectors: Finance; Countries: Malta
https://data.mendeley.com/datasets/wwb2rzgfn7/2

US court filing via CourtListener RECAP: United States v. Hyok

Coordination with Ghaleb Alaumary on accounts to receive Maltese Bank transfers · In January and February 2019
Overt Act No. 11: In January and February 2019, defendant KIM IL or another hacker communicated with unindicted coconspirator Ghaleb Alaumary regarding bank accounts that could receive false and fraudulent wire transfers from the Maltese Bank. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

US court filing via CourtListener RECAP: United States v. Hyok

Fraudulent wire transfers from the Maltese Bank · On February 12, 2019
Overt Act No. 12: On February 12, 2019, having gained unauthorized access to the Maltese Bank’s computer network at an earlier date, the hackers conducted false and fraudulent wire transfers totaling approximately $6.4 million and €7.1 million to bank accounts in Hong Kong, the United Kingdom, the United States, and the Czech Republic. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

DOJ OPA press release: International money launderer (Ghaleb Alaumary) sentenced (2021-09-08)

Cyber-heist of a Maltese bank (funds laundered by Alaumary) · 2019
The funds included those from a 2019 North Korean-perpetrated cyber-heist of a Maltese bank.
https://www.justice.gov/archives/opa/pr/international-money-launderer-sentenced-more-11-years-prison-laundering-millions-dollars

Values found later for empty fields

actors: Lazarus Group and Advanced Persistent Threat 38 (APT38)
These North Korean military hacking units are known by multiple names in the cybersecurity community, including Lazarus Group and Advanced Persistent Threat 38 (APT38). ... Attempts from 2015 through 2019 to steal more than $1.2 billion from banks in Vietnam, Bangladesh, Taiwan, Mexico, Malta, and Africa
https://www.justice.gov/archives/opa/pr/three-north-korean-military-hackers-indicted-wide-ranging-scheme-commit-cyberattacks-and
dollar figures: Attempted theft of 14.5M USD
Feb 2019 Malta Attempted theft of 14.5M USD from the Bank of Valletta (BOV) on 13 February.
https://undocs.org/S/2019/691
dollar figures: approximately $6.4 million and €7.1 million
On February 12, 2019, having gained unauthorized access to the Maltese Bank's computer network at an earlier date, the hackers conducted false and fraudulent wire transfers totaling approximately $6.4 million and €7.1 million to bank accounts in Hong Kong, the United Kingdom, the United States, and the Czech Republic.
https://www.justice.gov/opa/press-release/file/1367701/download

Suggest a correction on GitHub