DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

AppleJeus Version 3: Union Crypto (trojanized cryptocurrency application)

Date (as written)
December 2019
Year
2019
Actors (as written)
HIDDEN COBRA
Actor pages
HIDDEN COBRA
Tags (as written)
crypto theft; trojanized app

Source entries (3)

US court filing via CourtListener RECAP: United States v. Hyok

Union Crypto Trader malicious cryptocurrency application · Beginning on or before June 4, 2019
Overt Act No. 25: Beginning on or before June 4, 2019, defendant JON CHANG HYOK and other hackers developed Union Crypto Trader, which was purportedly a cryptocurrency trading software, but which was, in reality, a malicious cryptocurrency application. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

US court filing via CourtListener RECAP: United States v. Hyok

Fake employee personas for Union Crypto Trader · On dates in April 2019 through July 2019
Overt Act No. 26: On dates in April 2019 through July 2019, defendant JON CHANG HYOK and other hackers created online accounts using false and fraudulent personas for purported employees of Union Crypto Trader, which were designed to make Union Crypto Trader appear to be legitimate. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

CISA/FBI/Treasury advisory AA21-048A (AppleJeus: Analysis of North Korea's Cryptocurrency Malware)

AppleJeus Version 3: Union Crypto (trojanized cryptocurrency application) · December 2019
AppleJeus Version 3: Union Crypto Introduction and Infrastructure In December 2019, another version of the AppleJeus malware was identified on Twitter by a cybersecurity company based on many similarities to the original AppleJeus malware.
https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-048a

Suggest a correction on GitHub