DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Microsoft and Facebook disrupt ZINC (Lazarus Group) malware; WannaCry attribution

Date (as written)
2017-12-19T16:45:38+00:00 (published_time)
Year
2017
Actors (as written)
ZINC, also known as the Lazarus Group
Actor pages
ZINCalso known as the Lazarus Group
Tags (as written)
destructive; WannaCry

Source entries (2)

White House press briefing on the attribution of the WannaCry malware attack to North Korea (December 19, 2017; via Wayback)

Microsoft/Facebook disruption of North Korean cyber exploits still infecting computers · Last week (December 2017)
Last week, Microsoft and Facebook and other major tech companies acted to disable a number of North Korean cyber exploits and disrupt their operations as the North Koreans were still infecting computers across the globe.
https://www.whitehouse.gov/briefings-statements/press-briefing-on-the-attribution-of-the-wannacry-malware-attack-to-north-korea-121917/

Microsoft On the Issues blog

Microsoft and Facebook disrupt ZINC (Lazarus Group) malware; WannaCry attribution · 2017-12-19T16:45:38+00:00 (published_time)
took strong steps to protect our customers and the internet from ongoing attacks by an advanced persistent threat actor known to us as ZINC, also known as the Lazarus Group. We concluded that this threat actor was responsible for WannaCry, a destructive attack in May that targeted Microsoft customers.
https://blogs.microsoft.com/on-the-issues/2017/12/19/microsoft-facebook-disrupt-zinc-malware-attack-protect-customers-internet-ongoing-cyberthreats/

Suggest a correction on GitHub