CSIS entry 779

CSIS Significant Cyber Incidents

North Korean hackers have reportedly targeted universities in the U.S. since May, with a particular focus on individuals with expertise in biomedical engineering

ThaiCERT Threat Group Cards

Operation “Stolen Pencil” ASERT has learned of an APT campaign, possibly originating from DPRK, we are calling Stolen Pencil that is targeting academic institutions since at least May 2018. https://www.netscout.com/blog/asert/stolen-pencil-campaign-targets-academia

Dyadic Cyber Incident Dataset v2

North Korean attacked universities in the U.S. focusing on biomedical engineering

CISA/FBI/USCYBERCOM advisory AA20-301A (North Korean APT Focus: Kimsuky)

During the STOLEN PENCIL operation in May 2018, Kimsuky used the GREASE malware.

Hackmageddon cyber attacks timelines (Paolo Passeri)

Researchers from the ASERT Team of Netscout reveal the details of Stolen Pencil, a campaign allegedly originating from North Korea, targeting academic institutions since at least May 2018, using a malicious Google Chrome extension

North Korean hackers have reportedly targeted universities in the U.S. since May, with a particular focus on individuals with expertise in biomedical engineering