UN Panel of Experts S/2024/215
https://www.microsoft.com/en-us/security/blog/2023/10/18/multiple-north-korean-threat-actors-exploiting-the-teamcity-cve-2023-42793-vulnerability/ https://www.microsoft.com/en-us/security/blog/2023/11/22/diamond-sleet-supply-chain-compromise-distributes-a-modified-cyberlink-installer/ · September/ October
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 41 of 75, PDF p. 326). DPRK cyber actor: Lazarus/ Andariel; Report Name: https://www.microsoft.com/en-us/security/blog/2023/10/18/multiple-north-korean-threat-actors-exploiting-the-teamcity-cve-2023-42793-vulnerability/ https://www.microsoft.com/en-us/security/blog/2023/11/22/diamond-sleet-supply-chain-compromise-distributes-a-modified-cyberlink-installer/; Case Summary: The Lazarus Group and Andariel exploited a remote-code execution vulnerability (CVE -2023-42793) affecting the JetBrains TeamCity server, an application used for software development.; Publication Month: September/ October