DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Operation AppleJeus Sequel

Date (as written)
2020-01-08T10:00:47
Year
2020

Source entries (4)

CFR Cyber Operations Tracker

Continued targeting of cryptocurrency businesses · Jan 2020
The North Korean hackers renewed attacks against unnamed cryptocurrency businesses to steal cryptocurrency for financial gain.
https://www.cfr.org/cyber-operations/continued-targeting-of-cryptocurrency-businesses
https://securelist.com/operation-applejeus-sequel/95596/

Check Point Research

13th January – Threat Intelligence Bulletin · 2020-01-13
New report follows the continuing operations of the North Korean Lazarus APT group targeting cryptocurrency related websites. New findings show the sequel of the 2018 AppleJeus operation using advanced TTPs with new victims in the UK, Poland, Russia and China.
https://research.checkpoint.com/2020/13th-january-threat-intelligence-bulletin/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Cryptocurrency businesses · 08/01/2020
Researchers from Kaspersky reveal the details of a new wave of attacks linked to Operation AppleJeus, and targeting cryptocurrency business in multiple countries including UK, Poland, Russia and China.
https://www.hackmageddon.com/2020/02/10/1-15-january-2020-cyber-attacks-timeline/
https://www.zdnet.com/article/this-cryptocurrency-stealing-malware-just-got-a-significant-upgrade-and-new-tactics/

Kaspersky Securelist

Operation AppleJeus Sequel · 2020-01-08T10:00:47
To attack macOS users, the Lazarus group has developed homemade macOS malware, and added an authentication mechanism to deliver the next stage payload very carefully, as well as loading the next-stage payload without touching the disk.
https://securelist.com/operation-applejeus-sequel/95596/

Suggest a correction on GitHub