DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

City Union Bank

Date (as written)
2018-02
Year
2018
Country
India
Actors (as written)
Bluenoroff
Actor pages
Bluenoroff
Tags (as written)
Finance SWIFT FinancialGain
Dollar figures (as written)
$1.87 million; 16.8 USD

Source entries (3)

lazarus.day

City Union Bank · 2018-02
Group-IB listed City Union Bank in India among Lazarus-attributed SWIFT theft cases and reported a $1.87 million loss in the same financial-sector campaign set that included Banco de Chile, Cosmos Bank, Bank of Valletta, and Punjab National Bank. The evidence ties the incident to North Korea-linked operators using SWIFT access and prepared cash-out schemes against banks rather than a generic fraud case.
https://lazarus.day/incidents/cityunion/

UN Panel of Experts S/2019/691

Attempted theft of 16.8 USD from City Union Bank using techniques similar to February 2016 attack on · Feb 2018
Annex 21: Suspected DPRK cyber-attacks on financial institutions (including banks and cryptocurrency exchanges) investigated by the Panel. A. Banks. Attempted theft of 16.8 USD from City Union Bank using techniques similar to February 2016 attack on Bangladesh Bank.
https://undocs.org/S/2019/691

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

City Union Bank · 2018-02
Reported: 2018-02; Victims: City Union Bank; Motivations: FinancialGain; Sectors: Finance; Countries: India
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Suggest a correction on GitHub