| 2017-12-19T16:45:38+00:00 (published_time) | Microsoft and Facebook disrupt ZINC (Lazarus Group) malware; WannaCry attribution | | ZINC, also known as the Lazarus Group |
| 2019-12-30T20:18:41+00:00 (published_time) | Thallium spear-phishing; Microsoft court order seizes 50 domains | U.S., as well as Japan and South Korea | Thallium |
| 2020-11-13T13:59:58+00:00 (published_time) | Cerium targeting Covid-19 vaccine and treatment researchers (WHO-themed spear-phishing) | Canada, France, India, South Korea and the United States (all three actors combined) | Cerium |
| 2025-10-16T14:06:28+00:00 (published_time) | Microsoft Digital Defense Report 2025 summary: North Korean remote IT workers and extortion | companies around the world | North Korean remote IT workers |