DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

ESET WeLiveSecurity (35)

Date (as written)IncidentCountryActors
2018/04/03Lazarus KillDisks Central American casino
2020/11/16Lazarus supply-chain attack in South Korea
2020/06/17Operation In(ter)ception: Aerospace and military companies in the crosshairs of cyberspies
Apr 2021Targeting of South African freight companiesSouth African shipping companiesLazarus Group
2021/06/03ESET Threat Report T 1 2021 (DPRK-related paragraph 1)
2021/06/03ESET Threat Report T 1 2021 (DPRK-related paragraph 2)
2021/02/08 (DPRK-related paragraph 1)
01.01.2022North Korean state-sponsored hacking group 'Lazarus' gained access to network of unspecified Spanish aerospace company beginning in 2022SpainLazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
2022/09/30Amazon-themed campaigns of Lazarus in the Netherlands and Belgium
2022/11/30Who’s swimming in South Korean waters? Meet ScarCruft’s Dolphin
2022/11/14ESET APT Activity Report T2 2022 (DPRK-related paragraph 1)
2022/11/14ESET APT Activity Report T2 2022 (DPRK-related paragraph 2)
2022/10/05ESET Threat Report T2 2022 (DPRK-related paragraph 1)
2022/10/05ESET Threat Report T2 2022 (DPRK-related paragraph 2)
20/04/2023People working in software or DeFi platforms>1Lazarus Group AKA Labyrinth Collima, Covellite, UNC4034, Zinc, Nickel Academy)
2023/02/23WinorDLL64: A backdoor from the vast Lazarus arsenal?
2023/05/09ESET APT Activity Report Q4 2022­–Q1 2023 (DPRK-related paragraph 1)
2023/10/26ESET APT Activity Report Q2–Q3 2023 (DPRK-related paragraph 1)
2023/10/26ESET APT Activity Report Q2–Q3 2023 (DPRK-related paragraph 2)
2023/10/26ESET APT Activity Report Q2–Q3 2023 (DPRK-related paragraph 3)
2023/10/26ESET APT Activity Report Q2–Q3 2023 (DPRK-related paragraph 4)
2023/02/08ESET Threat Report T3 2022 (DPRK-related paragraph 1)
2023/01/31ESET APT Activity Report T3 2022 (DPRK-related paragraph 1)
2024/06/14ESET Research Podcast: APT Activity Report Q4 2023–Q1 2024 (DPRK-related paragraph 1)
2024/05/14ESET APT Activity Report Q4 2023–Q1 2024 (DPRK-related paragraph 1)
2024/11/07ESET APT Activity Report Q2 2024–Q3 2024 (DPRK-related paragraph 1)
2025/10/23Gotta fly: Lazarus targets the UAV sector
2025/02/20DeceptiveDevelopment targets freelance developers
2025/09/25DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception
2025/11/06ESET APT Activity Report Q2 2025–Q3 2025 (DPRK-related paragraph 1)
2025/05/19ESET APT Activity Report Q4 2024–Q1 2025 (DPRK-related paragraph 1)
2025/05/19ESET APT Activity Report Q4 2024–Q1 2025 (DPRK-related paragraph 2)
2026-05-05Korean-speaking users via sqgame[.]net (China-based game platform)KR,CNAPT37 (a.k.a. ScarCruft, Ricochet Chollima)
2026/05/28ESET APT Activity Report Q4 2025–Q1 2026 (DPRK-related paragraph 1)
2026/05/28ESET APT Activity Report Q4 2025–Q1 2026 (DPRK-related paragraph 2)