Metrolinx

lazarus.day

In January 2018, Canadian transit agency Metrolinx confirmed a cyberattack traced to a North Korean source. The intrusion breached a firewall but affected a system not tied to customer data, employee data, or safety systems; Metrolinx said it detected and responded quickly and believed the activity was routed through Russia.

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Reported: 2018-01; Victims: Metrolinx; Motivations: Espionage; Sectors: Transportation; Countries: Canada

Hackmageddon cyber attacks timelines (Paolo Passeri)

Ontario transit agency Metrolinx says it was the target of a cyberattack that originated in North Korea, but no personal information was compromised.

Ontario transit agency Metrolinx says targeted by North Korean cyberattack [headline]