DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Fortinet FortiGuard Labs blog (9)

Date (as written)IncidentCountryActors
2017-05WannaCry RansomwareZZZ, ๐Ÿ‡ท๐Ÿ‡บ Russian Federation, ๐Ÿ‡ฏ๐Ÿ‡ต Japan, ๐Ÿ‡ฌ๐Ÿ‡ง United Kingdom, ๐Ÿ‡ซ๐Ÿ‡ท France, ๐Ÿ‡ฐ๐Ÿ‡ท Korea, Republic of, ๐Ÿ‡ฎ๐Ÿ‡ณ India, ๐Ÿ‡จ๐Ÿ‡ณ China, ๐Ÿ‡ฉ๐Ÿ‡ช Germany, ๐Ÿ‡ช๐Ÿ‡ธ Spain, ๐Ÿ‡ฎ๐Ÿ‡ฉ Indonesia, ๐Ÿ‡ง๐Ÿ‡ท Brazil, ๐Ÿ‡บ๐Ÿ‡ธ United StatesLazarus
2017-11-28T08:00:00.000ZA Deep Dive Analysis of the FALLCHILL Remote Administration Tool
2017-08-15T07:00:00.000ZA Quick Look at a New KONNI RAT Variant
2019-10-23T07:00:00.000ZA Deep-Dive Analysis of the NukeSped RATs
Since February 2020Resumed bank targeting: fraudulent international money transfers and ATM cash outsBeagleBoyz
2020-02-14T08:00:00.000ZMalware Analysis: HIDDEN COBRA & North Korean Cyber Threats | FortiGuard Labs
2022-09Meeting the โ€œMinistrerโ€Reaper, APT 37, Ricochet Chollima, ScarCruft
20/11/2023Organizations in RussiaRUKonni
2026-04-02T13:00:00.000ZDPRK-Related Campaigns with LNK and GitHub C2 | FortiGuard Labs