DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

CSIS entry 237

Date (as written)
April 2023
Year
2023
Actor pages
DeathNote cluster of the Lazarus group

Source entries (1)

CSIS Significant Cyber Incidents

CSIS entry 237 · April 2023
North Korea-linked hackers are operating an ongoing espionage campaign targeting defense industry firms in Eastern Europe and Africa. Researchers at Kaspersky believe the hacking group shifted its focus in 2020 from financially motivated coin-mining attacks to espionage.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

Values found later for empty fields

country: Eastern Europe and Africa
North Korea-linked hackers are operating an ongoing espionage campaign targeting defense industry firms in Eastern Europe and Africa.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm
actors: DeathNote cluster of the Lazarus group
DeathNote, one of clusters that belong to the infamous Lazarus group
https://www.kaspersky.com/about/press-releases/evolution-of-lazarus-deathnote-cluster-from-cryptocurrency-attacks-to-the-defense-sector

Suggest a correction on GitHub