Indodax

Date (as written): 2018-09
Year: 2018
Country: Indonesia
Actors (as written): Bluenoroff
Actor pages: Bluenoroff
Tags (as written): FinancialGain Cryptocurrency
Dollar figures (as written): $24,900,000; 24.9m; $24.9 million; approximately $24.9 million

Source entries (7)

lazarus.day

Indodax · 2018-09

Indodax is referenced in U.S. and UN-linked reporting as one of multiple cryptocurrency entities affected by North Korean cyber-enabled financial theft and laundering activity associated in security reporting with Lazarus/APT38 and Bluenoroff. Later blockchain-security reporting linked laundering infrastructure associated with Lazarus Group to the Indodax hack and compared it with North Korean social-engineering activity against cryptocurrency-sector targets.

https://lazarus.day/incidents/indodax/

tayvano/lazarus-bluenoroff-research

Indodax · 2018-09-01

Amt Stolen: $24,900,000

https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/indodax.md

UN Panel of Experts S/2024/215

Indodax · 1 September 2018

Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2018: Victim: Indodax; Date: 1 September; Amount (USD equivalent): 24.9m; Location: Indonesia

https://undocs.org/S/2024/215

US DOJ press release 2021-02-17 (Jon Chang Hyok, Kim Il, Park Jin Hyok indictment)

Indonesian cryptocurrency company · September 2018

Targeting of Cryptocurrency Companies and Theft of Cryptocurrency: ... $24.9 million from an Indonesian cryptocurrency company in September 2018

https://www.justice.gov/opa/pr/three-north-korean-military-hackers-indicted-wide-ranging-scheme-commit-cyberattacks-and

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Indodax · 2018-09

Reported: 2018-09; Victims: Indodax; Motivations: FinancialGain; Sectors: Cryptocurrency; Countries: Indonesia

https://data.mendeley.com/datasets/wwb2rzgfn7/2

US court filing via CourtListener RECAP: United States v. Hyok

Spear-phishing of Indonesian Cryptocurrency Company employees · In March 2018 and April 2018

Overt Act No. 38: In March 2018 and April 2018, a conspirator sent spear-phishing communications to employees of the Indonesian Cryptocurrency Company. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]

https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

US court filing via CourtListener RECAP: United States v. Hyok

Theft from Indonesian Cryptocurrency Company (exchange, Jakarta) · On September 27, 2018

Overt Act No. 39: On September 27, 2018, having gained unauthorized access to the computer network of the Indonesian Cryptocurrency Company at an earlier date, the hackers fraudulently transferred cryptocurrency, valued at approximately $24.9 million, from the wallets of the Indonesian Cryptocurrency Company. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]

https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

Suggest a correction on GitHub