DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

The first artefacts we found relating to MATA were used around April 2018. After that, the actor behind this advanced malware framework used it aggressively to infiltrate corporate entities around the world.

Date (as written)
2018-04
Year
2018
Actors (as written)
Lazarus Group, Hidden Cobra, Labyrinth Chollima
Actor pages
Lazarus GroupHidden CobraLabyrinth Chollima

Source entries (2)

EuRepoC

Lazarus goes HakunaMATA · 01.04.2018
Lazarus attacked various cooperate entities across Germany, Poland, Turkey, India, Japan and the ROK with its new insertion framework MATA
https://www.darkreading.com/threat-intelligence/north-koreas-lazarus-group-developing-cross-platform-malware-framework/d/d-id/1338422
https://securelist.com/mata-multi-platform-targeted-malware-framework/97746/

ThaiCERT Threat Group Cards

The first artefacts we found relating to MATA were used around April 2018. After that, the actor behind this advanced malware framework used it aggressively to infiltrate corporate entities around the world. · 2018-04
The first artefacts we found relating to MATA were used around April 2018. After that, the actor behind this advanced malware framework used it aggressively to infiltrate corporate entities around the world. https://securelist.com/mata-multi-platform-targeted-malware-framework/97746/
https://securelist.com/mata-multi-platform-targeted-malware-framework/97746/

Values found later for empty fields

country: Poland, Germany, Turkey, Korea, Japan and India
Victims were recorded in Poland, Germany, Turkey, Korea, Japan and India.
https://securelist.com/mata-multi-platform-targeted-malware-framework/97746/

Suggest a correction on GitHub