DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Targeting of Danish critical infrastructure companies

Date (as written)
Nov 2023
Year
2023
Country
Users of CyberLink’s Promeo software
Actors (as written)
Sandworm
Actor pages
Sandworm
Tags (as written)
Espionage; Government Private sector

Source entries (1)

CFR Cyber Operations Tracker

Targeting of Danish critical infrastructure companies · Nov 2023
Starting in May 2023, Russian threat actor Sandworm used a vulnerability in Zyxel firewalls to break into the networks of twenty-two Danish companies operating in different critical infrastructure sectors.
https://www.cfr.org/cyber-operations/targeting-of-danish-critical-infrastructure-companies
https://www.microsoft.com/en-us/security/blog/2023/11/22/diamond-sleet-supply-chain-compromise-distributes-a-modified-cyberlink-installer/

Suggest a correction on GitHub