Chongho Easycash

lazarus.day

Chongho Easycash/VANXATM involved cyber-enabled payment-card and ATM fraud in South Korea, with copied cards used for cash withdrawals and purchases after financial transaction information was stolen and distributed. Financial Security Institute’s Rifle reporting links VANXATM to the broader Andariel-attributed activity set against domestic South Korean targets, alongside other malware and intrusion cases including DESERTWOLF and GhostRAT.

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Reported: 2017-03; Victims: Chongho Easycash; Motivations: FinancialGain DataBreach; Sectors: Finance; Countries: Korea, Republic of

카드를 복제해 현금 인출, 대금 결제 등으로 1억264만원을 부당하게 사용한 혐의를 받고 있다.