DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

TA408 custom malware campaigns against aerospace, defense, engineering and pharmaceutical sectors and U.S. and ROK military targets

Date (as written)
since about 2019
Year
2019
Actors (as written)
TA408 (also known as Cerium)
Actor pages
TA408
Tags (as written)
espionage; malware

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

TA408 custom malware campaigns against aerospace, defense, engineering and pharmaceutical sectors and U.S. and ROK military targets · since about 2019
(MSMT/2025/2, report p. 16) “Since about 2019, TA408 has deployed custom malware against victims in the aerospace, defense, engineering, and pharmaceutical sectors worldwide as well as against U.S. and ROK military targets.”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub