DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Tracing State-Aligned Activity Targeting Journalists, Media

Date (as written)
2022 Early
Year
2022
Actors (as written)
Lazarus Group, Hidden Cobra, Labyrinth Chollima
Actor pages
Lazarus GroupHidden CobraLabyrinth Chollima

Source entries (4)

ThaiCERT Threat Group Cards

Tracing State-Aligned Activity Targeting Journalists, Media · 2022 Early
Tracing State-Aligned Activity Targeting Journalists, Media https://www.proofpoint.com/us/blog/threat-insight/above-fold-and-your-inbox-tracing-state-aligned-activity-targeting-journalists
https://www.proofpoint.com/us/blog/threat-insight/above-fold-and-your-inbox-tracing-state-aligned-activity-targeting-journalists

CISSM Cyber Events Database (copy exported 21 Apr 2023, via github.com/holisticinfosec/CISSM-EDA)

Undisclosed US-based media organization · 2022-07-14
Researchers from Proofpoint reveal the details of a campaign carried out by the North Korean threat group Lazarus Group (AKA TA404) targeting an undisclosed US-based media organization.
https://www.bleepingcomputer.com/news/security/hackers-pose-as-journalists-to-breach-news-media-org-s-networks/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Undisclosed US-based media organization · 14/07/2022
Researchers from Proofpoint reveal the details of a campaign carried out by the North Korean threat group Lazarus Group (AKA TA404) targeting an undisclosed US-based media organization. [Date Occurred: Early 2022; Date Discovered: -]
https://www.hackmageddon.com/2022/07/21/1-15-july-2022-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/hackers-pose-as-journalists-to-breach-news-media-org-s-networks/

Proofpoint Threat Insight

TA404 (Lazarus) job-themed phishing against a US-based media organization (early 2022) · July 14, 2022
In a vengeful twist, the North Korea-aligned TA404 in early 2022 targeted a US-based media organization with job opportunity-themed phishing. This attack occurred after the organization published an article critical of North Korean leader Kim Jong Un
https://www.proofpoint.com/us/blog/threat-insight/above-fold-and-your-inbox-tracing-state-aligned-activity-targeting-journalists

Values found later for empty fields

country: US-based
the North Korea-aligned TA404 in early 2022 targeted a US-based media organization with job opportunity-themed phishing.
https://www.proofpoint.com/us/blog/threat-insight/above-fold-and-your-inbox-tracing-state-aligned-activity-targeting-journalists

Suggest a correction on GitHub