DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Fractured Statue

Date (as written)
01.07.2019
Year
2019
Country
United States
Actors (as written)
TA406/Konni Group/Opal Sleet fka OSMIUM < Kimsuky
Actor pages
TA406Konni GroupOpal Sleet fka OSMIUM < Kimsuky
Tags (as written)
Data theft;Hijacking with Misuse

Source entries (7)

EuRepoC

Fractured Statue · 01.07.2019
North Korean attackers accessed the networks of an unidentified US government agency.
https://unit42.paloaltonetworks.com/the-fractured-statue-campaign-u-s-government-targeted-in-spear-phishing-attacks/#Attribution

ThaiCERT Threat Group Cards

Operation “Fractured Statue” · 2019-07
Operation “Fractured Statue” https://unit42.paloaltonetworks.com/the-fractured-statue-campaign-u-s-government-targeted-in-spear-phishing-attacks/
https://unit42.paloaltonetworks.com/the-fractured-statue-campaign-u-s-government-targeted-in-spear-phishing-attacks/

CISSM Cyber Events Database (copy exported 21 Apr 2023, via github.com/holisticinfosec/CISSM-EDA)

U.S. government agency · 2020-01-24
Researchers at Palo Alto Networks' Unit 42 discover a new campaign dubbed "Fractured Statue", carried out via a malware called CARROTBALL, used in targeted attacks, against a U.S. government agency and non-US foreign nationals professionally affiliated with current activities in North Korea.
https://www.bleepingcomputer.com/news/security/us-govt-agency-hit-with-new-carrotball-malware-dropper/

CFR Cyber Operations Tracker

Konni Group · Jan 2020
Attempted to trick employees of unnamed U.S. government agency to install malware on their computers via a spearphishing campaign.
https://www.cfr.org/cyber-operations/konni-group
https://blog.talosintelligence.com/2017/05/konni-malware-under-radar-for-years.html
https://unit42.paloaltonetworks.com/the-fractured-statue-campaign-u-s-government-targeted-in-spear-phishing-attacks/#Attribution

CFR Cyber Operations Tracker

Spear-phishing campaign against unnamed U.S. government agency · Jan 2020
The suspected North Korean threat actor Konni Group attempted to trick employees of an unnamed U.S. government agency to install malware on their computers via a spear-phishing campaign.
https://www.cfr.org/cyber-operations/spear-phishing-campaign-against-unnamed-u-s-government-agency
https://unit42.paloaltonetworks.com/the-fractured-statue-campaign-u-s-government-targeted-in-spear-phishing-attacks/#Attribution

Hackmageddon cyber attacks timelines (Paolo Passeri)

U.S. government agency · 24/01/2020
Researchers at Palo Alto Networks' Unit 42 discover a new campaign dubbed "Fractured Statue", carried out via a malware called CARROTBALL, used in targeted attacks, against a U.S. government agency and non-US foreign nationals professionally affiliated with current activities in North Korea.
https://www.hackmageddon.com/2020/02/27/16-31-january-2020-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/us-govt-agency-hit-with-new-carrotball-malware-dropper/

Palo Alto Networks Unit 42

The Fractured Statue Campaign: U.S. Government Agency Targeted in Spear-Phishing Attacks · 2020-01-23T06:00:41
Unit 42 observed several malware families typically associated with the Konni Group primarily targetting a US government agency at the height of the US interacting with North Korea.
https://unit42.paloaltonetworks.com/the-fractured-statue-campaign-u-s-government-targeted-in-spear-phishing-attacks/

Suggest a correction on GitHub