WaveString

Date (as written): 2018-09
Year: 2018
Country: Korea, Republic of
Actors (as written): Lazarus
Actor pages: Lazarus
Tags (as written): Cryptocurrency SupplyChain

Source entries (2)

lazarus.day

WaveString · 2018-09

The WaveString case involved Lazarus-linked supply-chain activity around the Coinis cryptocurrency trading platform and the fake software company Celas. Kaspersky reporting described attackers stealing a code-signing certificate and using it to sign malware disguised as an OpenSSL library, then pushing malicious files through the Coinis HTS update path to reach cryptocurrency users and exchanges.

https://lazarus.day/incidents/wavestring/

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

WaveString · 2018-09

Reported: 2018-09; Victims: WaveString; Motivations: SupplyChain; Sectors: Cryptocurrency; Countries: Korea, Republic of

https://data.mendeley.com/datasets/wwb2rzgfn7/2

Suggest a correction on GitHub