DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Andariel Tdrop malware attacks (C2 servers registered via Yahoo accounts)

Year
undated
Actors (as written)
Andariel
Actor pages
Andariel
Tags (as written)
malware; espionage

Source entries (1)

US court filing via CourtListener RECAP: United States v. 17 Electronic Accounts located at Google LLC

Andariel Tdrop malware attacks (C2 servers registered via Yahoo accounts)
The ninnhanpandiri@gmail.com account has been associated with Andariel activity related to the Tdrop malware, which is a Microsoft Windows malware family widely attributed by the private sector to North Korea. [Case No. 6:26-cv-01047, U.S. District Court for the District of Kansas; filing: COMPLAINT with trial location of Wichita, filed by United States of America.]
https://storage.courtlistener.com/recap/gov.uscourts.ksd.162556/gov.uscourts.ksd.162556.1.1.pdf

Suggest a correction on GitHub