DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

FALLCHILL malware campaign (aerospace, telecommunications, finance)

Date (as written)
since 2016
Year
2016
Actors (as written)
HIDDEN COBRA
Actor pages
HIDDEN COBRA
Tags (as written)
malware campaign

Source entries (2)

CISA/DHS/FBI alert TA17-318A (HIDDEN COBRA – FALLCHILL)

FALLCHILL malware campaign (aerospace, telecommunications, finance) · since 2016
According to trusted third-party reporting, HIDDEN COBRA actors have likely been using FALLCHILL malware since 2016 to target the aerospace, telecommunications, and finance industries.
https://www.cisa.gov/news-events/alerts/2017/11/14/hidden-cobra-north-korean-remote-administration-tool-fallchill

Hackmageddon cyber attacks timelines (Paolo Passeri)

Aerospace, telecommunications and financial industries · 14/11/2017
The U.S. government issues a technical alert about Hidden Cobra, a wave of cyber attacks sponsored by the North Korean government that have targeted the aerospace, telecommunications and financial industries since 2016. Attackers are using a type of malware known as “FALLCHILL” to gain entry to computer systems and compromise network systems.
https://www.hackmageddon.com/2017/12/13/1-15-november-2017-cyber-attacks-timeline/
https://www.us-cert.gov/ncas/alerts/TA17-318A

Suggest a correction on GitHub