DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Intezer blog (6)

Date (as written)IncidentCountryActors
December 12, 2017BLOCKBUSTED: Lazarus, Blockbuster, and North KoreaLazarus group
October 10, 2017North Korea and Iran Use CodeProject to Develop Malware (WannaCry, Joanap)North Korean government (WannaCry, Joanap)
August 6, 2018Examining Code Reuse Reveals Undiscovered Links Among North Korea’s Malware Families (DarkSeoul, Operation Troy, 10 Days of Rain, WannaCry)Lazarus, Silent Chollima, Group 123, Hidden Cobra, DarkSeoul, Blockbuster, Operation Troy, 10 Days of Rain
2018-10-01T08:00:17NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT
February 8, 2018Hermes ransomware used as diversion in a bank heist in Taiwan; Hermes 2.1TaiwanLazarus group
October 31, 2018Paleontology: The Unknown Origins of Lazarus Malware (CasperPhpTrojan)Lazarus