DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

North Korean IT Worker from the State-Sponsored Fraud Group NICKEL TAPESTRY Stole Proprietary Data in Mid-2024

Date (as written)
01.01.2024
Year
2024
Country
Not available
Actors (as written)
NICKEL TAPESTRY
Actor pages
NICKEL TAPESTRY
Tags (as written)
Data theft

Source entries (1)

EuRepoC

North Korean IT Worker from the State-Sponsored Fraud Group NICKEL TAPESTRY Stole Proprietary Data in Mid-2024 · 01.01.2024
North Korean IT worker from the state-sponsored fraud group NICKEL TAPESTRY stole proprietary data in mid-2024, the U.S. cybersecurity firm Secureworks reported in a report on 16 October 2024. The report is basically about a campaign by the North Korean state-sponsored group NICKEL TAPESTRY, in which North Korean information technicians are deliberately infiltrated into Western companies in order to generate income for the North Korean state afterwards, for example, by demanding ransom for stolen data.
https://research.checkpoint.com/2024/21st-october-threat-intelligence-report/
https://www.secureworks.com/blog/fraudulent-north-korean-it-worker-schemes

Values found later for empty fields

dollar figures: six-figure ransom
After firing the cyber crook, the biz received "a series of emails" – one including .ZIP archive attachments containing samples of the stolen documents, and another demanding a six-figure ransom, paid in cryptocurrency, or else the criminals would leak the sensitive information.
https://www.theregister.com/2024/10/18/ransom_fake_it_worker_scam/

Suggest a correction on GitHub