DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

AppleJeus Version 5: CoinGoTrade (trojanized cryptocurrency application)

Date (as written)
early 2020
Year
2020
Actors (as written)
HIDDEN COBRA
Actor pages
HIDDEN COBRA
Tags (as written)
crypto theft; trojanized app

Source entries (3)

US court filing via CourtListener RECAP: United States v. Hyok

CoinGo Trade malicious cryptocurrency application · Beginning on or before February 28, 2020
Overt Act No. 28: Beginning on or before February 28, 2020, defendant JON CHANG HYOK and other hackers developed CoinGo Trade, which was purportedly cryptocurrency trading software, but which was, in reality, a malicious cryptocurrency application. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

US court filing via CourtListener RECAP: United States v. Hyok

CoinGo Trade advertised · In late March 2020
Overt Act No. 30: In late March 2020, defendant JON CHANG HYOK or another hacker sent electronic communications advertising and encouraging the download of CoinGo Trade. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

CISA/FBI/Treasury advisory AA21-048A (AppleJeus: Analysis of North Korea's Cryptocurrency Malware)

AppleJeus Version 5: CoinGoTrade (trojanized cryptocurrency application) · early 2020
AppleJeus Version 5: CoinGoTrade Introduction and Infrastructure In early 2020, another version of the AppleJeus malware was identified.
https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-048a

Suggest a correction on GitHub