DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

AppleJeus Version 6: Dorusio (trojanized cryptocurrency application)

Date (as written)
March 2020
Year
2020
Actors (as written)
HIDDEN COBRA
Actor pages
HIDDEN COBRA
Tags (as written)
crypto theft; trojanized app

Source entries (3)

US court filing via CourtListener RECAP: United States v. Hyok

Dorusio malicious cryptocurrency wallet application · Beginning on or before March 30, 2020
Overt Act No. 31: Beginning on or before March 30, 2020, defendant JON CHANG HYOK and other hackers developed Dorusio, which was purportedly cryptocurrency wallet software, but which was, in reality, a malicious cryptocurrency application. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

US court filing via CourtListener RECAP: United States v. Hyok

Dorusio advertised · On March 30, 2020
Overt Act No. 32: On March 30, 2020, defendant JON CHANG HYOK or another hacker sent electronic communications advertising and encouraging the download of Dorusio. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]
https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

CISA/FBI/Treasury advisory AA21-048A (AppleJeus: Analysis of North Korea's Cryptocurrency Malware)

AppleJeus Version 6: Dorusio (trojanized cryptocurrency application) · March 2020
AppleJeus Version 6: Dorusio Introduction and Infrastructure In March 2020, an additional version of the AppleJeus malware was identified.
https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-048a

Suggest a correction on GitHub