DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

AppleJeus campaign against energy, finance, government, industry, technology and telecom sectors in 30+ countries

Date (as written)
Since January 2020
Year
2020
Country
Argentina, Australia, Belgium, Brazil, Canada, China, Denmark, Estonia, Germany, Hong Kong, Hungary, India, Ireland, Israel, Italy, Japan, Luxembourg, Malta, the Netherlands, New Zealand, Poland, Russia, Saudi Arabia, Singapore, Slovenia, South Korea, Spain, Sweden, Turkey, the United Kingdom, Ukraine, and the United States
Actors (as written)
HIDDEN COBRA; Lazarus Group
Actor pages
HIDDEN COBRALazarus Group
Tags (as written)
crypto theft; malware campaign

Source entries (3)

CFR Cyber Operations Tracker

Targeting of cryptocurrency exchanges and financial service companies · Feb 2021
North Korean APT Lazarus Group disseminated cryptocurrency trading applications outfitted with the AppleJeus malware. AppleJeus was used to steal cryptocurrency from unsuspecting victims in over thirty countries in 2020.
https://www.cfr.org/cyber-operations/targeting-of-cryptocurrency-exchanges-and-financial-service-companies
https://www.cisa.gov/uscert/ncas/alerts/aa21-048a

CISA/FBI/Treasury advisory AA21-048A (AppleJeus: Analysis of North Korea's Cryptocurrency Malware)

AppleJeus campaign against energy, finance, government, industry, technology and telecom sectors in 30+ countries · Since January 2020
Since January 2020, the threat actors have targeted these sectors in the following countries: Argentina, Australia, Belgium, Brazil, Canada, China, Denmark, Estonia, Germany, Hong Kong, Hungary, India, Ireland, Israel, Italy, Japan, Luxembourg, Malta, the Netherlands, New Zealand, Poland, Russia, Saudi Arabia, Singapore, Slovenia, South Korea, Spain, Sweden, Turkey, the United Kingdom, Ukraine, and the United States (figure 1).
https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-048a

Hackmageddon cyber attacks timelines (Paolo Passeri)

Crypto traders in the US · 17/02/2021
The FBI, CISA, and US Department of Treasury share detailed info on malicious and fake crypto-trading applications used by North Korean-backed state hackers to steal cryptocurrency via the AppleJeus malware. [Date Occurred: –; Date Discovered: –]
https://www.hackmageddon.com/2021/03/08/16-28-february-2021-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/us-shares-info-on-north-korean-malware-used-to-steal-cryptocurrency/

Suggest a correction on GitHub