| 2015-11-18T16:25:41 | TDrop2 Attacks Suggest Dark Seoul Attackers Return | | |
| 2017-08 | The Blockbuster Saga Continues | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 2017-12 | Operation “Fractured Block” | | Reaper, APT 37, Ricochet Chollima, ScarCruft |
| 2017-11-20T14:45:25 | Operation Blockbuster Goes Mobile | | |
| 2/1/2019 | Babyshark - US | US / N Korea | |
| 2018-09-27T08:00:04 | New KONNI Malware attacking Eurasia and Southeast Asia | | |
| 2018-10-01T08:00:17 | NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT | | |
| 2018-04-05T13:00:40 | Reaper Group’s Updated Mobile Arsenal | | |
| 01.07.2019 | Fractured Statue | United States | TA406/Konni Group/Opal Sleet fka OSMIUM < Kimsuky |
| 21/11/2023 | Multiple western organizations | >1 | Threat actors from North Korea |
| 2024-10 | Play Ransomware | | Andariel |
| 2024-02 | Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 2024-09-18T14:00:59 | Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and macOS Backdoors | | |
| 2024-09-26T03:00:51 | Unraveling Sparkling Pisces’s Tool Set: KLogEXE and FPSpy | | |
| 2024-10-09T03:00:54 | Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware | | |
| 2024-11-14T15:00:12 | Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack | | |
| 2024-11-13T03:00:36 | Global Companies Are Unknowingly Paying North Koreans: Here’s How to Catch Them | | |
| 2024-09-09T15:00:58 | Threat Assessment: North Korean Threat Groups | | |
| 2025-04-21T03:00:56 | False Face: Unit 42 Demonstrates the Alarming Ease of Synthetic Identity Creation | | |
| 2025-02-26T03:00:59 | RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector | | |