DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

COVID disruption_DPRK

Date (as written)
5/1/2020
Year
2020
Country
US / N Korea
Actor pages
Lazarus GroupZincCerium

Source entries (1)

Dyadic Cyber Incident Dataset v2

COVID disruption_DPRK · 5/1/2020
Attempted access to COVID vaccine data
https://www.cyfirma.com/early-warning/global-covid-19-related-phishing-campaign-by-north-korean-operatives-lazarus-group-exposed-by-cyfirma-researchers/
https://www.zdnet.com/article/north-korean-state-hackers-reportedly-planning-covid-19-phishing-campaign-targeting-5m-across-six-nations/
https://techcrunch.com/2020/11/13/microsoft-russia-north-korea-hackers-coronavirus-vaccine/

Values found later for empty fields

actors: Lazarus Group
CYFIRMA Researchers have been tracking the Lazarus Group, a known hacker group sponsored by North Korea, for many years.
https://www.cyfirma.com/early-warning/global-covid-19-related-phishing-campaign-by-north-korean-operatives-lazarus-group-exposed-by-cyfirma-researchers/
actors: Zinc
The other two groups are backed by the North Korean regime, one of which Microsoft calls Zinc but is better known as the Lazarus Group
https://techcrunch.com/2020/11/13/microsoft-russia-north-korea-hackers-coronavirus-vaccine/
actors: Cerium
But little is known about the other North Korea-backed hacker group, which Microsoft calls Cerium.
https://techcrunch.com/2020/11/13/microsoft-russia-north-korea-hackers-coronavirus-vaccine/

Suggest a correction on GitHub