DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

DSME#1

Date (as written)
2016-04
Year
2016
Country
Korea, Republic of
Actors (as written)
Andariel
Actor pages
Andariel
Tags (as written)
Defense Espionage DataBreach

Source entries (7)

lazarus.day

DSME#1 · 2016-04
BLACKSHEEP is preserved as an Andariel-linked South Korea incident through FSI’s Rifle campaign archive, which grouped BLACKSHEEP with other linked intrusions and malware cases assessed as activity by the same attacker. The available evidence is limited but places the case in a Korea-focused Andariel/Rifle cluster involving malicious-code profiling and Hangul document tradecraft against domestic targets.
https://lazarus.day/incidents/blacksheep/

CSIS Significant Cyber Incidents

CSIS entry 975 · April 2016
North Korean hackers stole warship blueprints from the database of a South Korean shipbuilder.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

EuRepoC

Daewoo Shipbuilding Hack · 01.04.2016
North Korea probably stole South Korean warship blueprints after hacking into Daewoo Shipbuilding & Marine Engineering CoLtd’s data base in April 2016, a South Korean opposition lawmaker said.
https://www.reuters.com/article/us-northkorea-missiles-cybercrime/north-korea-hacked-daewoo-shipbuilding-took-warship-blueprints-south-korea-lawmaker-idUSKBN1D00EX

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

DSME#1 · 2016-04
Reported: 2016-04; Victims: DSME#1; Motivations: Espionage DataBreach; Sectors: Defense; Countries: Korea, Republic of
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Hackmageddon cyber attacks timelines (Paolo Passeri)

Daewoo Shipbuilding & Marine Engineering Co Ltd · 31/10/2017
North Korea is suspected to have stolen South Korean warship blueprints after hacking into Daewoo Shipbuilding & Marine Engineering Co Ltd’s database in April last year.
https://www.hackmageddon.com/2017/11/14/16-31-october-2017-cyber-attacks-timeline/
https://www.reuters.com/article/us-northkorea-missiles-cybercrime/north-korea-hacked-daewoo-shipbuilding-took-warship-blueprints-south-korea-lawmaker-idUSKBN1D00EX

보안뉴스 (boannews)

대우조선 해킹 (전함·잠수함 설계도) [기사: 북한, 작년 4월 대우조선 해킹해 전함 및 잠수함 설계도 가져갔다] · 2017-11-01
북한이 작년 4월 대우조선을 해킹해 군함 설계도 등 기밀 문건을 탈취해 간 것으로 보인다. 외신들은 자유한국당의 경대수 의원의 말을 인용해 북한의 이 같은 행위를
https://www.boannews.com/news/articleView.html?idxno=57803

Boannews 보안뉴스 (boannews.com)

북한, 작년 4월 대우조선 해킹해 전함 및 잠수함 설계도 가져갔다 · 2017-11-01
attribution sentence(s): 북한, 상징적인 해킹 공격을 세계적으로 일으켜와 | 북한 사이버전 능력, 이란과 러시아 통해 많은 힌트 얻은 것으로 보여 | [보안뉴스 문가용 기자] 북한이 작년 4월 대우조선을 해킹해 군함 설계도 등 기밀 문건을 탈취해 간 것으로 보인다.
https://m.boannews.com/html/detail.html?idx=57803

Suggest a correction on GitHub