DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

CSIS entry 712

Date (as written)
July 2019
Year
2019
Actor pages
Thallium

Source entries (2)

CSIS Significant Cyber Incidents

CSIS entry 712 · July 2019
Microsoft revealed that it had detected almost 800 cyberattacks over the past year targeting think tanks, NGOs, and other political organizations around the world, with the majority of attacks originating in Iran, North Korean, and Russia.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

Hackmageddon cyber attacks timelines (Paolo Passeri)

Multiple Targets · 17/07/2019
Microsoft said that over the past year it notified nearly 10,000 users that they'd been targeted or compromised by nation-state hacking groups.
https://www.hackmageddon.com/2019/09/10/16-31-july-2019-cyber-attacks-timeline/
https://www.zdnet.com/article/microsoft-notified-10000-victims-of-nation-state-attacks/

Values found later for empty fields

country: United States
democracy-focused organizations in the United States should be particularly concerned as 95% of these attacks have targeted U.S.-based organizations.
https://blogs.microsoft.com/on-the-issues/2019/07/17/new-cyberthreats-require-new-ways-to-protect-democracy/
actors: Thallium
We have seen extensive activity from the actors we call Holmium and Mercury operating from Iran, Thallium operating from North Korea, and two actors operating from Russia we call Yttrium and Strontium.
https://blogs.microsoft.com/on-the-issues/2019/07/17/new-cyberthreats-require-new-ways-to-protect-democracy/

Suggest a correction on GitHub