DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

CSIS entry 752

Date (as written)
February 2019
Year
2019
Actor pages
Velvet Chollima

Source entries (2)

CSIS Significant Cyber Incidents

CSIS entry 752 · February 2019
Prior to the Vietnam summit of Kim Jong Un and Donald Trump, North Korean hackers were found to have targeted South Korean institutions in a phishing campaign using documents related to the diplomatic event as bait.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

Dyadic Cyber Incident Dataset v2

Trump-Un Summit phishing · 2/20/2019
Prior to the Vietnam summit of Kim Jong Un and Donald Trump, North Korean hackers were found to have targeted South Korean institutions in a phishing campaign using documents related to the diplomatic event as bait. No evidence to suggest their attack was successful.
https://www.cyberscoop.com/trump-kim-summit-vietnam-north-korea-hackers-phishing/

Values found later for empty fields

country: South Korean
Prior to the Vietnam summit of Kim Jong Un and Donald Trump, North Korean hackers were found to have targeted South Korean institutions in a phishing campaign using documents related to the diplomatic event as bait.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm
actors: Velvet Chollima
Cybersecurity company CrowdStrike has seen that same document lure and believes it comes from a North Korea-linked hacking group it calls Velvet Chollima
https://cyberscoop.com/trump-kim-summit-vietnam-north-korea-hackers-phishing/

Suggest a correction on GitHub