Symantec / Broadcom Threat Hunter Team (security.com) (12)
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| 2013-06 | 6.25 Cyber Terror | Korea, Republic of | Lazarus |
| 2016-02-24T13:10:07 | Operation Blockbuster revealed | ||
| 26 May 2016 | SWIFT attackers’ malware linked to more financial attacks | ||
| 2017-05 | WannaCry Ransomware | ZZZ, 🇷🇺 Russian Federation, 🇯🇵 Japan, 🇬🇧 United Kingdom, 🇫🇷 France, 🇰🇷 Korea, Republic of, 🇮🇳 India, 🇨🇳 China, 🇩🇪 Germany, 🇪🇸 Spain, 🇮🇩 Indonesia, 🇧🇷 Brazil, 🇺🇸 United States | Lazarus |
| 8 Nov 2018 | FASTCash: How the Lazarus Group is Emptying Millions from ATMs | ||
| 18 Feb 2021 | Lazarus: Three North Koreans Charged for Financially Motivated Attacks | ||
| April 2022 | CSIS entry 353 | ||
| 27 Apr 2022 | Stonefly: North Korea-linked Spying Operation Continues to Hit High-value Targets | ||
| 2023-03-30T11:37:54+00:00 (published_time) | 3CX Desktop App supply chain compromise (ICONIC) | UTA0040, later attributed to Lazarus | |
| 01.08.2024 | North Korean state-sponsored hacking group Stonefly launched an attack on US companies in August 2024 | United States | Andariel/APT45/Onyx Sleet fka PLUTONIUM/Silent Chollima/Stonefly/G0138/DarkSeoul < Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110) |
| 16 May 2024 | Springtail: New Linux Backdoor Added to Toolkit | ||
| 24 Feb 2026 | North Korean Lazarus Group Now Working With Medusa Ransomware |