DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Six ransomware incidents affecting victims in the United States and the ROK

Date (as written)
between May 2021 and March 2023
Year
2021
Country
United States; Republic of Korea
Actors (as written)
Rim Jong Hyok (Andariel)
Actor pages
Rim Jong Hyok
Tags (as written)
ransomware

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

Six ransomware incidents affecting victims in the United States and the ROK · between May 2021 and March 2023
(MSMT/2025/2, report p. 38) “In July 2024, North Korean national Rim Jong Hyok was identified as an Andariel actor implicated in six ransomware incidents affecting victims in the United States and the ROK between May 2021 and March 2023.”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub