DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Operation “Erebus”

Date (as written)
2016
Year
2016
Actors (as written)
Reaper, APT 37, Ricochet Chollima, ScarCruft
Actor pages
ReaperAPT 37Ricochet ChollimaScarCruft

Source entries (1)

ThaiCERT Threat Group Cards

Operation “Erebus” · 2016
Operation “Erebus” https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/erebus-linux-ransomware-impact-to-servers-and-countermeasures
https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/erebus-linux-ransomware-impact-to-servers-and-countermeasures

Values found later for empty fields

country: South Korea-based
On June 10, South Korea-based web hosting company NAYANA became one of the latest high-profile victims of ransomware after 153 of its Linux servers were found infected with an Erebus ransomware
https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/erebus-linux-ransomware-impact-to-servers-and-countermeasures
dollar figures: 10 Bitcoins ($24,689), but the ransom has since gone down to 5 BTC ($12,344)
Similar to NAYANA's case, it originally demanded 10 Bitcoins ($24,689), but the ransom has since gone down to 5 BTC ($12,344).
https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/erebus-linux-ransomware-impact-to-servers-and-countermeasures

Suggest a correction on GitHub