| 01.01.2013 | Operation“Kimsuky” | Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;China;China;China;China | Kimsuky/Velvet Chollima/STOLEN PENCIL/Emerald Sleet fka THALLIUM/Black Banshee/G0094 |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 1) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 2) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 3) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 4) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 5) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 6) | | |
| 2014-12 | Sony Pictures Entertainment | United States | Lazarus |
| 2015-11-02 | IT threat evolution in Q3 2015 (DPRK-related paragraph 1) | | |
| 2016-03 | Operation “Daybreak” | | Reaper, APT 37, Ricochet Chollima, ScarCruft |
| 2016-02-24T13:10:07 | Operation Blockbuster revealed | | |
| 2016-05-05 | IT threat evolution in Q1 2016 (DPRK-related paragraph 1) | | |
| 2016-05-05 | IT threat evolution in Q1 2016 (DPRK-related paragraph 2) | | |
| 2016-08-11 | IT threat evolution in Q2 2016. Statistics (DPRK-related paragraph 1) | | |
| 2016-08-11 | IT threat evolution in Q2 2016. Overview (DPRK-related paragraph 1) | | |
| 2016-08-11 | IT threat evolution in Q2 2016. Overview (DPRK-related paragraph 2) | | |
| 2016-08-11 | IT threat evolution in Q2 2016. Overview (DPRK-related paragraph 3) | | |
| 2017-05 | WannaCry Ransomware | ZZZ, 🇷🇺 Russian Federation, 🇯🇵 Japan, 🇬🇧 United Kingdom, 🇫🇷 France, 🇰🇷 Korea, Republic of, 🇮🇳 India, 🇨🇳 China, 🇩🇪 Germany, 🇪🇸 Spain, 🇮🇩 Indonesia, 🇧🇷 Brazil, 🇺🇸 United States | Lazarus |
| 2017-04-03T17:57:56 | Lazarus Under The Hood | | |
| 2017-04-27 | APT Trends report, Q1 2017 (DPRK-related paragraph 1) | | |
| 2017-04-27 | APT Trends report, Q1 2017 (DPRK-related paragraph 2) | | |
| 2017-04-27 | APT Trends report, Q1 2017 (DPRK-related paragraph 3) | | |
| 2017-04-27 | APT Trends report, Q1 2017 (DPRK-related paragraph 4) | | |
| 2017-04-27 | APT Trends report, Q1 2017 (DPRK-related paragraph 5) | | |
| 2017-08-08 | APT Trends report Q2 2017 (DPRK-related paragraph 1) | | |
| 2017-08-08 | APT Trends report Q2 2017 (DPRK-related paragraph 2) | | |
| 2017-08-08 | APT Trends report Q2 2017 (DPRK-related paragraph 3) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 1) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 2) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 3) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 4) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 5) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 6) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 7) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 8) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 9) | | |
| 2017-08-15 | IT threat evolution Q2 2017 (DPRK-related paragraph 10) | | |
| 2017-11-14 | APT Trends report Q3 2017 | Securelist (DPRK-related paragraph 1) | | |
| 2017-08-15T09:00:37 | IT threat evolution Q2 2017 | | |
| 2019-09 | Indian Financial Institute | India | Lazarus |
| 2018-08 | Operation “AppleJeus” | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 2018-11 | More Attacks on Cryptocurrency Businesses | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 2018-04-12 | APT Trends report Q1 2018 (DPRK-related paragraph 1) | | |
| 2018-04-12 | APT Trends report Q1 2018 (DPRK-related paragraph 2) | | |
| 2018-04-12 | APT Trends report Q1 2018 (DPRK-related paragraph 3) | | |
| 2018-05-14 | IT threat evolution Q1 2018 (DPRK-related paragraph 1) | | |
| 2018-05-14 | IT threat evolution Q1 2018 (DPRK-related paragraph 2) | | |
| 2018-07-10 | APT Trends Report Q2 2018 (DPRK-related paragraph 1) | | |
| 2018-07-10 | APT Trends Report Q2 2018 (DPRK-related paragraph 2) | | |
| 2018-07-10 | APT Trends Report Q2 2018 (DPRK-related paragraph 3) | | |
| 2018-07-10 | APT Trends Report Q2 2018 (DPRK-related paragraph 4) | | |
| 2018-07-10 | APT Trends Report Q2 2018 (DPRK-related paragraph 5) | | |
| 2018-07-10 | APT Trends Report Q2 2018 (DPRK-related paragraph 6) | | |
| 2018-11-12 | IT threat evolution Q3 2018 | Securelist (DPRK-related paragraph 1) | | |
| 2018-11-12 | IT threat evolution Q3 2018 | Securelist (DPRK-related paragraph 2) | | |
| 2018-11-12 | IT threat evolution Q3 2018 | Securelist (DPRK-related paragraph 3) | | |
| 2018-11-12 | IT threat evolution Q3 2018 | Securelist (DPRK-related paragraph 4) | | |
| 2018-12-05 | APT Review of the year (DPRK-related paragraph 1) | | |
| 2018-12-05 | APT Review of the year (DPRK-related paragraph 2) | | |
| 2018-12-05 | APT Review of the year (DPRK-related paragraph 3) | | |
| 2018-12-05 | APT Review of the year (DPRK-related paragraph 4) | | |
| 2019-05-13T10:00:03 | ScarCruft continues to evolve, introduces Bluetooth harvester | | |
| 2019-11-29T10:00:12 | IT threat evolution Q3 2019 | | |
| 2019-04-30 | APT trends report Q1 2019 (DPRK-related paragraph 1) | | |
| 2019-05-23 | IT threat evolution Q1 2019 (DPRK-related paragraph 1) | | |
| 2019-05-23 | IT threat evolution Q1 2019 (DPRK-related paragraph 2) | | |
| 2019-08-01 | APT trends report Q2 2019 (DPRK-related paragraph 1) | | |
| 2019-08-01 | APT trends report Q2 2019 (DPRK-related paragraph 2) | | |
| 2019-08-01 | APT trends report Q2 2019 (DPRK-related paragraph 3) | | |
| 2019-08-19 | IT threat evolution Q2 2019 (DPRK-related paragraph 1) | | |
| 2019-08-19 | IT threat evolution Q2 2019 (DPRK-related paragraph 2) | | |
| 2019-08-19 | IT threat evolution Q2 2019 (DPRK-related paragraph 3) | | |
| 2019-08-19 | IT threat evolution Q2 2019 (DPRK-related paragraph 4) | | |
| 2019-10-16 | APT trends report Q3 2019 (DPRK-related paragraph 1) | | |
| 2019-10-16 | APT trends report Q3 2019 (DPRK-related paragraph 2) | | |
| 2019-11-29 | IT threat evolution Q3 2019 (DPRK-related paragraph 1) | | |
| 2019-12-04 | APT review: what the world’s threat actors got up to in 2019 (DPRK-related paragraph 1) | | |
| 2019-12-04 | APT review: what the world’s threat actors got up to in 2019 (DPRK-related paragraph 2) | | |
| 2019-12-04 | APT review: what the world’s threat actors got up to in 2019 (DPRK-related paragraph 3) | | |
| 2019-12-04 | APT review: what the world’s threat actors got up to in 2019 (DPRK-related paragraph 4) | | |
| 2020-07 | VHD Ransomware | ZZZ | Lazarus |
| 01.01.2020 | ThreatNeedle: Defense Industries | Unknown | Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110) |
| 23/12/20 | Undisclosed pharmaceutical company | N/A | Lazarus Group |
| 2020-01-08T10:00:47 | Operation AppleJeus Sequel | | |
| 22/07/2020 | Corporate entities from multiple countries | >1 | The Lazarus Group AKA HIDDEN COBRA |
| 2020-11-20T10:00:58 | IT threat evolution Q3 2020 | | |
| 2020-05-20T10:00:43 | IT threat evolution Q1 2020 | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 1) | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 2) | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 3) | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 4) | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 5) | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 6) | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 7) | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 8) | | |
| 2020-04-30 | APT trends report Q1 2020 (DPRK-related paragraph 9) | | |
| 2020-05-20 | IT threat evolution Q1 2020 (DPRK-related paragraph 1) | | |
| 2020-05-20 | IT threat evolution Q1 2020 (DPRK-related paragraph 2) | | |
| 2020-07-29 | APT trends report Q2 2020 (DPRK-related paragraph 1) | | |
| 2020-07-29 | APT trends report Q2 2020 (DPRK-related paragraph 2) | | |
| 2020-07-29 | APT trends report Q2 2020 (DPRK-related paragraph 3) | | |
| 2020-07-29 | APT trends report Q2 2020 (DPRK-related paragraph 4) | | |
| 2020-07-29 | APT trends report Q2 2020 (DPRK-related paragraph 5) | | |
| 2020-07-29 | APT trends report Q2 2020 (DPRK-related paragraph 6) | | |
| 2020-07-29 | APT trends report Q2 2020 (DPRK-related paragraph 7) | | |
| 2020-11-03 | APT trends report Q3 2020 (DPRK-related paragraph 1) | | |
| 2020-11-03 | APT trends report Q3 2020 (DPRK-related paragraph 2) | | |
| 2020-11-03 | APT trends report Q3 2020 (DPRK-related paragraph 3) | | |
| 2020-11-20 | IT threat evolution Q3 2020 (DPRK-related paragraph 1) | | |
| 2020-11-20 | IT threat evolution Q3 2020 (DPRK-related paragraph 2) | | |
| 2020-11-20 | IT threat evolution Q3 2020 (DPRK-related paragraph 3) | | |
| 2020-11-20 | IT threat evolution Q3 2020 (DPRK-related paragraph 4) | | |
| 2020-11-20 | IT threat evolution Q3 2020. Non-mobile statistics (DPRK-related paragraph 1) | | |
| 2021-03 | ScarCruft surveilling North Korean defectors and human rights activists | | Reaper, APT 37, Ricochet Chollima, ScarCruft |
| 2021-06-15T12:40:11 | Andariel evolves to target South Korea with ransomware | | |
| 2021-12-16T10:00:19 | PseudoManuscrypt: a mass-scale spyware attack campaign | | |
| 2021-04-27 | APT trends report Q1 2021 (DPRK-related paragraph 1) | | |
| 2021-04-27 | APT trends report Q1 2021 (DPRK-related paragraph 2) | | |
| 2021-04-27 | APT trends report Q1 2021 (DPRK-related paragraph 3) | | |
| 2021-04-27 | APT trends report Q1 2021 (DPRK-related paragraph 4) | | |
| 2021-05-31 | IT threat evolution Q1 2021 (DPRK-related paragraph 1) | | |
| 2021-05-31 | IT threat evolution Q1 2021 (DPRK-related paragraph 2) | | |
| 2021-05-31 | IT threat evolution Q1 2021 (DPRK-related paragraph 3) | | |
| 2021-07-29 | APT trends report Q2 2021 (DPRK-related paragraph 1) | | |
| 2021-07-29 | APT trends report Q2 2021 (DPRK-related paragraph 2) | | |
| 2021-07-29 | APT trends report Q2 2021 (DPRK-related paragraph 3) | | |
| 2021-08-12 | IT threat evolution Q2 2021 (DPRK-related paragraph 1) | | |
| 2021-08-12 | IT threat evolution Q2 2021 (DPRK-related paragraph 2) | | |
| 2021-08-12 | IT threat evolution Q2 2021 (DPRK-related paragraph 3) | | |
| 2021-10-26 | APT trends report Q3 2021 (DPRK-related paragraph 1) | | |
| 2021-10-26 | APT trends report Q3 2021 (DPRK-related paragraph 2) | | |
| 2021-10-26 | APT trends report Q3 2021 (DPRK-related paragraph 3) | | |
| 2021-10-26 | APT trends report Q3 2021 (DPRK-related paragraph 4) | | |
| 2021-10-26 | APT trends report Q3 2021 (DPRK-related paragraph 5) | | |
| 2021-10-26 | APT trends report Q3 2021 (DPRK-related paragraph 6) | | |
| 2021-10-26 | APT trends report Q3 2021 (DPRK-related paragraph 7) | | |
| 2023-03 | 3CX | United States | UNC4736 |
| 2022-11-15T10:00:28 | DTrack activity targeting Europe and Latin America | | |
| 2022-12-27T08:00:26 | BlueNoroff introduces new methods bypassing MoTW | | |
| 2022-01-13T09:00:23 | The BlueNoroff cryptocurrency hunt is still on | | |
| 2022-08-25T01:00:31 | Kimsuky’s GoldDragon cluster and its C2 operations | | |
| 2022-05-27T08:00:43 | IT threat evolution Q1 2022 | | |
| 2022-03-31T12:00:23 | Lazarus Trojanized DeFi app for delivering malware | | |
| 2022-08-09T10:00:46 | Andariel deploys DTrack and Maui ransomware | | |
| 2022-04-27 | APT trends report Q1 2022 (DPRK-related paragraph 1) | | |
| 2022-04-27 | APT trends report Q1 2022 (DPRK-related paragraph 2) | | |
| 2022-04-27 | APT trends report Q1 2022 (DPRK-related paragraph 3) | | |
| 2022-05-27 | Kaspersky IT threat report for Q1 2022 (DPRK-related paragraph 1) | | |
| 2022-05-27 | Kaspersky IT threat report for Q1 2022 (DPRK-related paragraph 2) | | |
| 2022-05-27 | Kaspersky IT threat report for Q1 2022 (DPRK-related paragraph 3) | | |
| 2022-07-28 | APT trends report Q2 2022 (DPRK-related paragraph 1) | | |
| 2022-07-28 | APT trends report Q2 2022 (DPRK-related paragraph 2) | | |
| 2022-07-28 | APT trends report Q2 2022 (DPRK-related paragraph 3) | | |
| 2022-08-15 | Non-mobile malware statistics, Q2 2022 (DPRK-related paragraph 1) | | |
| 2022-11-01 | APT trends report Q3 2022 (DPRK-related paragraph 1) | | |
| 2022-11-01 | APT trends report Q3 2022 (DPRK-related paragraph 2) | | |
| 2022-11-01 | APT trends report Q3 2022 (DPRK-related paragraph 3) | | |
| 2022-11-01 | APT trends report Q3 2022 (DPRK-related paragraph 4) | | |
| 2022-11-01 | APT trends report Q3 2022 (DPRK-related paragraph 5) | | |
| 2022-11-01 | APT trends report Q3 2022 (DPRK-related paragraph 6) | | |
| 2022-11-18 | PC malware statistics, Q3 2022 (DPRK-related paragraph 1) | | |
| 2022-11-18 | PC malware statistics, Q3 2022 (DPRK-related paragraph 2) | | |
| 2022-11-18 | PC malware statistics, Q3 2022 (DPRK-related paragraph 3) | | |
| 2022-11-18 | IT threat evolution Q3 2022 (DPRK-related paragraph 1) | | |
| 2022-11-18 | IT threat evolution Q3 2022 (DPRK-related paragraph 2) | | |
| 2022-11-18 | IT threat evolution Q3 2022 (DPRK-related paragraph 3) | | |
| 2022-11-18 | IT threat evolution Q3 2022 (DPRK-related paragraph 4) | | |
| 2022-11-18 | IT threat evolution Q3 2022 (DPRK-related paragraph 5) | | |
| 2022-11-18 | IT threat evolution Q3 2022 (DPRK-related paragraph 6) | | |
| 2023-06-28T10:00:24 | Andariel’s silly mistakes and a new malware family | | |
| 27/10/2023 | Undisclosed software vendor | N/A | Lazarus (aka Diamond Sleet and ZINC) |
| 2023-04-12T08:00:00 | Following the Lazarus group by tracking DeathNote campaign | | |
| 2023-10-17 | APT trends report Q3 2023 (DPRK-related paragraph 1) | | |
| 2023-12-05T10:00:34 | BlueNoroff: new Trojan attacking macOS users | | |
| 2023-08-30T10:00:05 | IT threat evolution in Q2 2023 | | |
| 2023-06-07T08:00:34 | IT threat evolution Q1 2023 | | |
| 2023-10-18T10:00:51 | Updated MATA attacks industrial companies in Eastern Europe | | |
| 2023-04-27 | APT trends report Q1 2023 (DPRK-related paragraph 1) | | |
| 2023-04-27 | APT trends report Q1 2023 (DPRK-related paragraph 2) | | |
| 2023-04-27 | APT trends report Q1 2023 (DPRK-related paragraph 3) | | |
| 2023-04-27 | APT trends report Q1 2023 (DPRK-related paragraph 4) | | |
| 2023-06-07 | High-profile malware and targeted attacks in Q1 2023 (DPRK-related paragraph 1) | | |
| 2023-06-07 | High-profile malware and targeted attacks in Q1 2023 (DPRK-related paragraph 2) | | |
| 2023-07-27 | APT trends report Q2 2023 (DPRK-related paragraph 1) | | |
| 2023-07-27 | APT trends report Q2 2023 (DPRK-related paragraph 2) | | |
| 2023-07-27 | APT trends report Q2 2023 (DPRK-related paragraph 3) | | |
| 2023-07-27 | APT trends report Q2 2023 (DPRK-related paragraph 4) | | |
| 2023-07-27 | APT trends report Q2 2023 (DPRK-related paragraph 5) | | |
| 2023-07-27 | APT trends report Q2 2023 (DPRK-related paragraph 6) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 1) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 2) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 3) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 4) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 5) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 6) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 7) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 8) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 9) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 10) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 11) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 12) | | |
| 2023-08-30 | IT threat evolution Q2 2023 (DPRK-related paragraph 13) | | |
| 2023-10-17 | APT trends report Q3 2023 (DPRK-related paragraph 2) | | |
| 2023-10-17 | APT trends report Q3 2023 (DPRK-related paragraph 3) | | |
| 2024-05 | The Crypto Game of Lazarus APT: Investors vs. Zero-days | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 2024-12-19T10:00:55 | Lazarus group evolves its infection chain with old and new malware | | |
| 2024-05-09 | Kaspersky report on APT trends in Q1 2024 (DPRK-related paragraph 1) | | |
| 2024-05-09 | Kaspersky report on APT trends in Q1 2024 (DPRK-related paragraph 2) | | |
| 2024-05-09 | Kaspersky report on APT trends in Q1 2024 (DPRK-related paragraph 3) | | |
| 2024-05-09 | Kaspersky report on APT trends in Q1 2024 (DPRK-related paragraph 4) | | |
| 2024-05-09 | Kaspersky report on APT trends in Q1 2024 (DPRK-related paragraph 5) | | |
| 2024-06-03 | Non-mobile malware statistics, Q1 2024 (DPRK-related paragraph 1) | | |
| 2024-11-28 | Kaspersky report on APT trends in Q3 2024 (DPRK-related paragraph 1) | | |
| 2024-11-28 | Kaspersky report on APT trends in Q3 2024 (DPRK-related paragraph 2) | | |
| 2024-11-28 | Kaspersky report on APT trends in Q3 2024 (DPRK-related paragraph 3) | | |
| 2025-04-24T05:00:04 | Operation SyncHole: Lazarus APT goes back to the well | | |
| 2025-10-28T03:00:11 | Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs | | |
| 2026-05-14T11:00:58 | Kimsuky targets organizations with PebbleDash-based tools | | |