| 2022-07 | H0lyGh0st Ransomware | United States | DEV-0530 |
| 2022-08 | deBridge Finance crypto platform targeted by Lazarus hackers | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 2022-10 | Internet Explorer 0-day exploited by North Korean actor APT37 | | Reaper, APT 37, Ricochet Chollima, ScarCruft |
| 2022년 하반기 | KISA crypto-incident timeline entries naming Lazarus (June to August 2022) | | |
| 2022년 하반기 | Lazarus laundering of Eterbase theft; Elliptic attributes Harmony Horizon bridge theft to Lazarus | | |
| 2022년 하반기 | Malicious crypto-stealing apps similar to those used by Konni in 2019 | | |
| 2022년 하반기 | North Korea placing IT workers at tech companies worldwide (CNN); US State Department $10 million reward | | |
| 2022년 하반기 | Malicious Hangul documents about the 20th presidential election, attributed to North Korean hackers | | |
| 2022년 하반기 | Lazarus impersonating executives of Japanese companies to phish employees | | |