DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

COPPERHEDGE / Manuscrypt targeting of cryptocurrency exchanges

Date (as written)
2020-05-12 (report date)
Year
2020
Actors (as written)
HIDDEN COBRA
Actor pages
HIDDEN COBRA
Tags (as written)
crypto; malware campaign

Source entries (4)

CFR Cyber Operations Tracker

Targeting of global financial institutions · May 2020
Hidden Cobra used a variety of malware tools to hack into and steal money from banks, cryptocurrency exchanges, and ATMs.
https://www.cfr.org/cyber-operations/targeting-of-global-financial-institutions
https://www.cyberscoop.com/north-korea-hacking-hidden-cobra-dhs-fbi/
https://us-cert.cisa.gov/northkorea

Check Point Research

18th May – Threat Intelligence Bulletin · 2020-05-18
The US government has released information on three new malware variants used in malicious cyber activity campaigns by a North Korean government-backed hacker group tracked as HIDDEN COBRA.
https://research.checkpoint.com/2020/18th-may-threat-intelligence-bulletin/

CISA/DHS/FBI/DoD MAR-10288834-1.v1 (AR20-133A) COPPERHEDGE

COPPERHEDGE / Manuscrypt targeting of cryptocurrency exchanges · 2020-05-12 (report date)
The Manuscrypt family of malware is used by advanced persistent threat (APT) cyber actors in the targeting of cryptocurrency exchanges and related entities.
https://www.cisa.gov/news-events/analysis-reports/ar20-133a

Hackmageddon cyber attacks timelines (Paolo Passeri)

US Companies · 05/12/2020
The US government (FBI, CISA, and DoD) releases information on three new malware variants (COPPERHEDGE, TAINTEDSCRIBE, PEBBLEDASH) used in malicious cyber activity campaigns by the North Korean government-backed hacker group tracked as HIDDEN COBRA.
https://www.hackmageddon.com/2020/06/19/1-15-may-2020-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/us-govt-exposes-new-north-korean-malware-phishing-attacks/

Suggest a correction on GitHub