DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Joanap and Brambul malware campaign (media, aerospace, financial, critical infrastructure)

Date (as written)
since at least 2009
Year
2009
Actors (as written)
HIDDEN COBRA
Actor pages
HIDDEN COBRA
Tags (as written)
malware campaign; espionage

Source entries (1)

CISA/DHS/FBI alert TA18-149A (HIDDEN COBRA – Joanap and Brambul)

Joanap and Brambul malware campaign (media, aerospace, financial, critical infrastructure) · since at least 2009
According to reporting of trusted third parties, HIDDEN COBRA actors have likely been using both Joanap and Brambul malware since at least 2009 to target multiple victims globally and in the United States—including the media, aerospace, financial, and critical infrastructure sectors.
https://www.cisa.gov/news-events/alerts/2018/05/29/hidden-cobra-joanap-backdoor-trojan-and-brambul-server-message-block-worm

Suggest a correction on GitHub