DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Cryptocurrency attacks on South Korean exchanges.

Date (as written)
2017/2018
Year
2017
Actors (as written)
Lazarus Group, Hidden Cobra, Labyrinth Chollima
Actor pages
Lazarus GroupHidden CobraLabyrinth Chollima

Source entries (3)

ThaiCERT Threat Group Cards

Cryptocurrency attacks on South Korean exchanges. · 2017/2018
Cryptocurrency attacks on South Korean exchanges. https://www.proofpoint.com/sites/default/files/pfpt-us-wp-north-korea-bitten-by-bitcoin-bug.pdf https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/lazarus-resurfaces-targets-global-banks-bitcoin-users/
https://www.proofpoint.com/sites/default/files/pfpt-us-wp-north-korea-bitten-by-bitcoin-bug.pdf
https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/lazarus-resurfaces-targets-global-banks-bitcoin-users/

Proofpoint Threat Insight

Lazarus Group PowerRatankba campaigns against cryptocurrency individuals and companies · report file dated 180129
In this report we describe and analyze a new, currently undocumented subset of the Lazarus Group’s toolset that has been widely targeting individuals, companies, and organizations with interests in cryptocurrency. ... Threat vectors for this new toolset, dubbed PowerRatankba, include highly targeted spearphishing campaigns using links and attachments as well as massive email phishing campaigns targeting both personal and corporate accounts of individuals with interests in cryptocurrency.
https://www.proofpoint.com/sites/default/files/pfpt-us-wp-north-korea-bitten-by-bitcoin-bug-180129.pdf

Recorded Future Insikt Group

North Korea's Late 2017 Campaign Targeted South Korean Cryptocurrency Users · (no date on page)
North Korean government actors, specifically Lazarus Group, continued to target South Korean cryptocurrency exchanges and users in late 2017, before Kim Jong Un’s New Year’s speech and subsequent North-South dialogue .
https://www.recordedfuture.com/blog/north-korea-cryptocurrency-campaign

Values found later for empty fields

country: South Korean
Cryptocurrency attacks on South Korean exchanges.
https://apt.etda.or.th/cgi-bin/showcard.cgi?g=Lazarus%20Group%2C%20Hidden%20Cobra%2C%20Labyrinth%20Chollima
dollar figures: nearly $100 million worth of cryptocurrencies
From these breaches, law enforcement agencies suspect that the group has amassed nearly $100 million worth of cryptocurrencies based on their value today.
https://www.proofpoint.com/sites/default/files/pfpt-us-wp-north-korea-bitten-by-bitcoin-bug.pdf

Suggest a correction on GitHub