DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Cryptocurrency users and investors.

Date (as written)
31/03/2022
Year
2022
Country
>1
Actors (as written)
Lazarus Group
Actor pages
Lazarus Group
Tags (as written)
Attack: Malware; Target Class: Fintech; Attack Class: CC; Tags: Kaspersky, Lazarus Group, DeFi Wallet

Source entries (3)

UN Panel of Experts S/2023/171

Attacks using Trojanized DeFi applications · March
Annex 76: List of DPRK cyberthreat actors' malicious activities in 2022 monitored by the Panel. RGB Unit: Lazarus Group; Case Name: Attacks using Trojanized DeFi applications; SPH √; VAS √; VAS Value: (blank); Publicized Month: March. (SPH Significant Phishing, KAC knowledge acquisition and espionage, VAS virtual asset seizures)
https://undocs.org/S/2023/171

Hackmageddon cyber attacks timelines (Paolo Passeri)

Cryptocurrency users and investors. · 31/03/2022
Researchers from Kaspersky discover that hackers from the Lazarus Group have been distributing a trojanized version of the DeFi Wallet for storing cryptocurrency assets to gain access to the systems of cryptocurrency users and investors. [Date Occurred: Since at least November 2021; Date Discovered: "Recently"]
https://www.hackmageddon.com/2022/04/11/16-31-march-2022-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/dprk-hackers-go-after-crypto-assets-using-trojanized-defi-wallet-app/

UN Panel of Experts S/2022/668

Trojanized DeFi Wallet
Para 127: “Another cybersecurity company shows that the Lazarus Group has been distributing a trojanized version of a DeFi Wallet for storing the cryptocurrency assets of users and investors.” (footnote 112: https://securelist.com/lazarus-trojanized-defi-app/106195)
https://undocs.org/S/2022/668

Suggest a correction on GitHub