DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

CSIS entry 892

Date (as written)
October 2017
Year
2017

Source entries (5)

CSIS Significant Cyber Incidents

CSIS entry 892 · October 2017
North Korean hackers were found to have targeted US electric companies in a spear-phishing campaign meant to probe utilities’ defenses.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

EuRepoC

Covellite attack on US electric grid · 01.01.2017
Covellite, a propably state-sponsored north Korean group tried to access networks of US-American and subsequently European and asian companies associated with the electrical grid.
https://www.zdnet.com/article/north-korean-apt-group-covellite-abandons-us-targets/
https://dragos.com/resource/covellite/
https://collaborate.mitre.org/attackics/index.php/Group/G0008

Dyadic Cyber Incident Dataset v2

Power Company Phishing · 9/22/2017
Concurrent with the SK Ministry of Defense breach, NK hacks USpower compaines in SK
https://www.nbcnews.com/news/north-korea/experts-north-korea-targeted-u-s-electric-power-companies-n808996
https://www.fireeye.com/blog/threat-research/2017/10/north-korean-actors-spear-phish-us-electric-companies.html
https://www.infosecurity-magazine.com/news/north-korea-targets-us-power-grid/
https://www.cyberscoop.com/north-korea-ics-hacking-dhs-ics-cert/

CFR Cyber Operations Tracker

Targeting of U.S. electric companies · Oct 2017
A threat actor targeted U.S. electric companies with spear-phishing emails in an attempt to gain access to internal networks.
https://www.cfr.org/cyber-operations/targeting-of-u-s-electric-companies
https://www.fireeye.com/blog/threat-research/2017/10/north-korean-actors-spear-phish-us-electric-companies.html

Hackmageddon cyber attacks timelines (Paolo Passeri)

U.S. Electric Power Companies · 10/10/2017
FireEye says in a new report to private clients that hackers linked to North Korea recently targeted U.S. electric power companies with spearphishing emails.
https://www.hackmageddon.com/2017/11/06/1-15-october-2017-cyber-attacks-timeline/
https://www.nbcnews.com/news/north-korea/experts-north-korea-targeted-u-s-electric-power-companies-n808996

Values found later for empty fields

country: US
North Korean hackers were found to have targeted US electric companies in a spear-phishing campaign meant to probe utilities’ defenses.
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

Suggest a correction on GitHub