CISA/State/Treasury/FBI advisory AA20-106A "Guidance on the North Korean Cyber Threat" (list: Cyber Operations Publicly Attributed to DPRK by U.S. Government) (5)
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| 2014-12 | Sony Pictures Entertainment | United States | Lazarus |
| 2018-10 | FASTCash | ZZZ | Hidden Cobra |
| 2016-02 | Bangladesh Central Bank | Bangladesh | Bluenoroff |
| 2017-05 | WannaCry Ransomware | ZZZ, 🇷🇺 Russian Federation, 🇯🇵 Japan, 🇬🇧 United Kingdom, 🇫🇷 France, 🇰🇷 Korea, Republic of, 🇮🇳 India, 🇨🇳 China, 🇩🇪 Germany, 🇪🇸 Spain, 🇮🇩 Indonesia, 🇧🇷 Brazil, 🇺🇸 United States | Lazarus |
| mid-2018 (learned of hack in late 2018) | Hack of The Exchange 1 via malware downloaded by an employee communicating with a "potential client" (Celas Trade Pro / Fallchill) | South Korea (three of the four exchanges were based in South Korea) | North Korean co-conspirators |