DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

South Korean Financial Companies Targeted by Castov

Date (as written)
2013-05
Year
2013
Actors (as written)
Lazarus Group, Hidden Cobra, Labyrinth Chollima
Actor pages
Lazarus GroupHidden CobraLabyrinth Chollima

Source entries (1)

ThaiCERT Threat Group Cards

South Korean Financial Companies Targeted by Castov · 2013-05
South Korean Financial Companies Targeted by Castov In the past few months we have been actively monitoring an exploit kit, called Gongda, which is mainly targeting South Korea. Interestingly, we have come across a piece of malware, known as Castov, being delivered by this exploit kit that targets specific South Korean financial companies and their customers. The cybercriminals in this case have done their research on the South Korean online financial landscape. https://www.symantec.com/connect/blogs/south-korean-financial-companies-targeted-castov
https://www.symantec.com/connect/blogs/south-korean-financial-companies-targeted-castov

Values found later for empty fields

country: South Korea; South Korean
we have been actively monitoring an exploit kit, called Gongda, which is mainly targeting South Korea. Interestingly, we have come across a piece of malware, known as Castov, being delivered by this exploit kit that targets specific South Korean financial companies and their customers.
https://apt.etda.or.th/cgi-bin/showcard.cgi?g=Lazarus%20Group%2C%20Hidden%20Cobra%2C%20Labyrinth%20Chollima

Suggest a correction on GitHub