CISA/FBI/Treasury advisory AA21-048A (AppleJeus: Analysis of North Korea's Cryptocurrency Malware) (8)
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| 2018-08 | Operation “AppleJeus” | Lazarus Group, Hidden Cobra, Labyrinth Chollima | |
| October 2019 | AppleJeus Version 2: JMT Trading (trojanized cryptocurrency application) | HIDDEN COBRA | |
| December 2019 | AppleJeus Version 3: Union Crypto (trojanized cryptocurrency application) | HIDDEN COBRA | |
| Since January 2020 | AppleJeus campaign against energy, finance, government, industry, technology and telecom sectors in 30+ countries | Argentina, Australia, Belgium, Brazil, Canada, China, Denmark, Estonia, Germany, Hong Kong, Hungary, India, Ireland, Israel, Italy, Japan, Luxembourg, Malta, the Netherlands, New Zealand, Poland, Russia, Saudi Arabia, Singapore, Slovenia, South Korea, Spain, Sweden, Turkey, the United Kingdom, Ukraine, and the United States | HIDDEN COBRA; Lazarus Group |
| March 13, 2020 | AppleJeus Version 4: Kupay Wallet (trojanized cryptocurrency application) | HIDDEN COBRA | |
| early 2020 | AppleJeus Version 5: CoinGoTrade (trojanized cryptocurrency application) | HIDDEN COBRA | |
| March 2020 | AppleJeus Version 6: Dorusio (trojanized cryptocurrency application) | HIDDEN COBRA | |
| late 2020 | AppleJeus Version 7: Ants2Whale (trojanized cryptocurrency application) | HIDDEN COBRA |