DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Microsoft Security Insider (intelligence report) (12)

Date (as written)IncidentCountryActors
2023-07-18T14:43:24+00:00Security alert: social engineering campaign targets technology industry employeesJade Sleet; TraderTraitor
publication date not shown on page (covers activity since June 2023)Jade Sleet theft from an Estonia-based cryptocurrency firm (early June 2023)EstoniaJade Sleet
publication date not shown on page (covers activity since June 2023)Jade Sleet heist from a Singapore-based cryptocurrency platform (a month after early June 2023)SingaporeJade Sleet
publication date not shown on page (covers activity since June 2023)Jade Sleet compromising online cryptocurrency casinos (August 2023)Jade Sleet
publication date not shown on page (covers activity since June 2023)Sapphire Sleet compromises of employees at cryptocurrency, venture capital and financial organizationsSapphire Sleet
publication date not shown on page (covers activity since June 2023)Citrine Sleet compromise of a Türkiye-based cryptocurrency firm following 3CX supply chain attackTürkiyeCitrine Sleet
publication date not shown on page (covers activity since June 2023)Diamond Sleet supply chain compromises of a Germany-based IT company (August 2023) and a Taiwan-based IT firm application (November 2023)Germany; TaiwanDiamond Sleet
publication date not shown on page (covers activity since June 2023)Ruby Sleet and Onyx Sleet targeting aerospace and defense organizationsUnited States and South KoreaRuby Sleet; Onyx Sleet
publication date not shown on page (covers activity since June 2023)Emerald Sleet reconnaissance and spear-phishing of diplomats and Korean Peninsula expertsEmerald Sleet
publication date not shown on page (covers activity since June 2023)Pearl Sleet targeting South Korean entities engaging with North Korean defectors and activists (June 2023)South KoreanPearl Sleet
publication date not shown on page (covers activity since June 2023)Ruby Sleet backdoored installer of a South Korean electronic document program (December 2023)South KoreanRuby Sleet
publication date not shown on page (covers activity since June 2023)North Korean cryptocurrency heists in 2023 (aggregate)North Korean cyber actors