Nigerian Bank

lazarus.day

The Nigerian Bank incident is listed among DPRK-linked BangSwift financial operations in broad U.S. indictment and UN sanctions reporting that described North Korean RGB-associated actors, including activity associated in security reporting with Lazarus Group and APT38, conducting cyber-enabled bank theft, SWIFT-related fraud, laundering, and revenue-generation operations against financial institutions worldwide. The incident’s existing Bluenoroff attribution is preserved because the linked evidence frames the case within North Korean financial-theft activity and does not contradict that actor assignment.

UN Panel of Experts S/2019/691

Annex 21: Suspected DPRK cyber-attacks on financial institutions (including banks and cryptocurrency exchanges) investigated by the Panel. A. Banks. Attempted theft of $100M

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Reported: 2016-07; Victims: Nigerian Bank; Motivations: FinancialGain; Sectors: Finance; Countries: Nigeria

July 2016 Nigeria Attempted theft of $100M

On July 20, 2016, having gained unauthorized access to the African Bank's computer network at an earlier date, the hackers conducted false and fraudulent wire transfers totaling approximately $104.1 million to bank accounts in Taiwan, Thailand, and Cambodia.