DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

BeagleBoyz attempted thefts total

Date (as written)
since at least 2015
Year
2015
Actors (as written)
BeagleBoyz (overlap: Lazarus, APT38, Bluenoroff, Stardust Chollima)
Actor pages
BeagleBoyz
Tags (as written)
bank theft; crypto theft
Dollar figures (as written)
$2 billion; nearly $2 billion

Source entries (4)

CISA/Treasury/FBI/USCYBERCOM advisory AA20-239A (FASTCash 2.0: North Korea's BeagleBoyz Robbing Banks)

BeagleBoyz attempted thefts total · since at least 2015
The BeagleBoyz have attempted to steal nearly $2 billion since at least 2015, according to public estimates.
https://www.cisa.gov/news-events/cybersecurity-advisories/aa20-239a

CISA/Treasury/FBI/USCYBERCOM advisory AA20-239A (FASTCash 2.0: North Korea's BeagleBoyz Robbing Banks)

Financial institutions targeted, by nation · from 2015 through 2020
The BeagleBoyz likely have targeted financial institutions in the following nations from 2015 through 2020: Argentina, Brazil, Bangladesh, Bosnia and Herzegovina, Bulgaria, Chile, Costa Rica, Ecuador, Ghana, India, Indonesia, Japan, Jordan, Kenya, Kuwait, Malaysia, Malta, Mexico, Mozambique, Nepal, Nicaragua, Nigeria, Pakistan, Panama, Peru, Philippines, Singapore, South Africa, South Korea, Spain, Taiwan, Tanzania, Togo, Turkey, Uganda, Uruguay, Vietnam, Zambia (figure 1).
https://www.cisa.gov/news-events/cybersecurity-advisories/aa20-239a

Hackmageddon cyber attacks timelines (Paolo Passeri)

Several international banks · 01/01/1970
A joint advisory issued by several U.S. Government agencies reveals that North Korean hackers tracked as BeagleBoyz have been using malicious remote access tools as part of ongoing attacks to steal millions from international banks. The campaign is called "Fast Cash"
https://www.hackmageddon.com/2020/10/13/16-31-august-2020-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/us-govt-warns-of-north-korean-hackers-targeting-banks-worldwide/

UN Panel of Experts S/2021/211

BeagleBoyz FASTCash ATM cash-out scheme and SWIFT attacks · since at least 2015
Para 127: “In August 2020, the United States identified a new cyberthreat group, “BeagleBoyz”, an element of the Reconnaissance General Bureau that has likely been active since 2014, and attributed the 2016 heist of Bangladesh Bank to this group in a public cybersecurity threat alert. According to the document, the BeagleBoyz had attempted to steal nearly $2 billion since at least 2015 through a “FASTCash” ATM cash-out scheme and attacks against Society for Worldwide Interbank Financial Telecommunication (SWIFT) terminals and the servers hosting the payment systems of financial institutions. The BeagleBoyz also attacked cryptocurrency exchanges by illegal remote access, including through the use of job application-themed spear-phishing emails.”
https://undocs.org/S/2021/211

Suggest a correction on GitHub