DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Organizations in medical research, healthcare, chemical engineering, energy, defense, and a leading research university

Date (as written)
02/02/2023
Year
2023
Country
>1
Actors (as written)
Lazarus Group
Actor pages
Lazarus Group
Tags (as written)
Attack: Targeted Attack; Target Class: Multiple Industries; Attack Class: CE; Tags: WithSecure, NoPineapple!, Lazarus group, North Korea

Source entries (3)

CSIS Significant Cyber Incidents

CSIS entry 254 · February 2023
A North Korean hacking group conducted an espionage campaign between August and November 2022. Hackers targeted medical research, healthcare, defense, energy, chemical engineering and a research university, exfiltrating over 100MB of data from each victim while remaining undetected. The group is linked to the North Korean government.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

CFR Cyber Operations Tracker

Targeting of an Indian medical research organization and technology and energy sectors · Feb 2023
Lazarus Group targeted an Indian health-care organization, a technology manufacturer, and the chemical engineering department of a leading research university. The campaign’s goal appeared to be collecting intelligence on major Indian industries.
https://www.cfr.org/cyber-operations/targeting-of-an-indian-medical-research-organization-and-technology-and-energy-sectors
https://labs.withsecure.com/publications/no-pineapple-dprk-targeting-of-medical-research-and-technology-sector

Hackmageddon cyber attacks timelines (Paolo Passeri)

Organizations in medical research, healthcare, chemical engineering, energy, defense, and a leading research university · 02/02/2023
Researchers at WithSecure reveal the details of "NoPineallple!", a new cyber espionage campaign attributed to the North Korean Lazarus hacking group, allowing the threat actors to stealthily steal 100GB of data from the victim without causing any destruction. [Date Occurred: Between August and November 2022; Date Discovered: During Q4 2022]
https://www.hackmageddon.com/2023/02/27/1-15-february-2023-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/north-korean-hackers-stole-research-data-in-two-month-long-breach/

Values found later for empty fields

country: India (Indian medical research organization, technology manufacturer, and university)
Lazarus Group targeted an Indian health-care organization, a technology manufacturer, and the chemical engineering department of a leading research university.
https://www.cfr.org/cyber-operations/targeting-of-an-indian-medical-research-organization-and-technology-and-energy-sectors
actors: Lazarus Group
Lazarus Group targeted an Indian health-care organization, a technology manufacturer, and the chemical engineering department of a leading research university.
https://www.cfr.org/cyber-operations/targeting-of-an-indian-medical-research-organization-and-technology-and-energy-sectors

Suggest a correction on GitHub