DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

PurpleBravo (Contagious Interview) targeting of cryptocurrency entities (October-November 2024)

Date (as written)
February 13, 2025
Year
2025
Country
United Arab Emirates
Actors (as written)
PurpleBravo (formerly TAG-120)
Actor pages
PurpleBravo
Tags (as written)
cryptocurrency: market-making firm, online casino, blockchain software company; software developers

Source entries (3)

Hackmageddon cyber attacks timelines (Paolo Passeri)

At least seven entities, three of which are in the cryptocurrency sector, including a market-making firm, an online casino, and a software company. · 13/02/2025
Researchers at Recorded Future discover a new wave of attacks from the Contagious Interview campaign targeting at least seven entities, three of which are in the cryptocurrency sector, including a market-making firm, an online casino, and a software company. [Date Occurred: Between October and November 2024.; Date Discovered: Between October and November 2024.]
https://www.hackmageddon.com/2025/07/23/1-15-february-2025-cyber-attacks-timeline/
https://thehackernews.com/2025/02/lazarus-group-deploys-marstech1.html

Recorded Future Insikt Group

PurpleBravo (Contagious Interview) targeting of cryptocurrency entities (October-November 2024) · February 13, 2025
PurpleBravo has targeted at least seven entities, three of which are in the cryptocurrency sector, including a market-making firm, an online casino, and a blockchain software company. ... At least three organizations in the broader cryptocurrency space were targeted by PurpleBravo between October and November 2024: a market-making company, an online casino, and a software development company. ... On October 3, 2024, Insikt Group observed likely reconnaissance traffic between a BeaverTail C2 and a market-making company in the cryptocurrency space based in the United Arab Emirates.
https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-nk-2025-0213.pdf

Recorded Future Insikt Group

PurpleBravo targeting and North Korea-linked front companies (Munich Security Conference 2025 briefing) · (no date on page)
PurpleBravo has targeted at least seven entities, three of which are in the cryptocurrency sector, including a market-making firm, an online casino, and a blockchain software company. ... Insikt Group identified at least seven suspected North Korea-linked front companies operating in China spoofing legitimate IT firms in China, India, Pakistan, Ukraine, and the United States.
https://www.recordedfuture.com/blog/munich-security-conference

Suggest a correction on GitHub