DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

UN Panel of Experts S/2019/691 (39)

Date (as written)IncidentCountryActors
2015-12Guatemalan Financial InstitutionGuatemalaBluenoroff
On December 9, 2015Fraudulent wire transfers from the Vietnamese BankVietnamJON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB)
2016-10Komisja Nadzoru FinansowegoPolandBluenoroff
2016-07Union Bank of IndiaIndiaBluenoroff
2016-07Nigerian BankNigeriaBluenoroff
2016-05Standard BankSouth Africa, ๐Ÿ‡ฏ๐Ÿ‡ต JapanBluenoroff
2016-02Bangladesh Central BankBangladeshBluenoroff
2017-12YoubitKorea, Republic ofBluenoroff
2017-12NiceHashSloveniaBluenoroff
2017-10Tunisian Financial InstitutionTunisiaBluenoroff
2017-10Far Eastern International BankTaiwanBluenoroff
2017-09CoinisKorea, Republic ofBluenoroff
2017-06Bithumb#2Korea, Republic ofBluenoroff
2017-05WannaCry RansomwareZZZ, ๐Ÿ‡ท๐Ÿ‡บ Russian Federation, ๐Ÿ‡ฏ๐Ÿ‡ต Japan, ๐Ÿ‡ฌ๐Ÿ‡ง United Kingdom, ๐Ÿ‡ซ๐Ÿ‡ท France, ๐Ÿ‡ฐ๐Ÿ‡ท Korea, Republic of, ๐Ÿ‡ฎ๐Ÿ‡ณ India, ๐Ÿ‡จ๐Ÿ‡ณ China, ๐Ÿ‡ฉ๐Ÿ‡ช Germany, ๐Ÿ‡ช๐Ÿ‡ธ Spain, ๐Ÿ‡ฎ๐Ÿ‡ฉ Indonesia, ๐Ÿ‡ง๐Ÿ‡ท Brazil, ๐Ÿ‡บ๐Ÿ‡ธ United StatesLazarus
2017-04YapizonKorea, Republic ofBluenoroff
2017-02Bithumb#1Korea, Republic ofBluenoroff
2017-07-152017 Cryptojacking Incidents
May-Sept 2017 / 23 September 2017ROK Police reported attacks on three cryptocurrency exchanges by DPRK actors and detailed that 25 employeesROKSuspected DPRK (annex title)
2018-12RedBancChileHidden Cobra
2018-08Cosmos BankIndiaBluenoroff
2018-06Bithumb#3Korea, Republic ofBluenoroff
2018-06Liberian Financial InstitutionLiberiaBluenoroff
2018-05Banco de ChileChileBluenoroff
2018-03Malaysian Central BankMalaysiaBluenoroff
2018-02City Union BankIndiaBluenoroff
2018-01BancomextMexicoBluenoroff
2018-01Costa Rican Financial InstitutionCosta RicaBluenoroff
Oct 2018Attempted theft of 2.6M USDBangladeshSuspected DPRK (annex title)
2019-03Bithumb#4Korea, Republic of
2019-03Kuwait BankKuwait
2019-03DragonExSingaporeLazarus
2019-03Nigerian Financial InstitutionNigeria
2019-03Gambian Financial InstitutionGambia
2019-02Bank of VallettaMalta
2019-02Spanish Financial InstitutionSpain
2019-01Operation โ€œKabar Cobraโ€Kimsuky, Velvet Chollima
28 May 2019UpBit attacked. No losses reported.ROKSuspected DPRK (annex title)
2019-05-20๊น€์ˆ˜ํ‚ค ์กฐ์ง, ํ•œ๊ตญ์„ ๊ฒจ๋ƒฅํ•œ 'ํŽ˜์ดํฌ ์ŠคํŠธ๋ผ์ด์ปค' APT ์ž‘์ „ ๊ฐœ์‹œFake Striker; Kimsuky; ๊น€์ˆ˜ํ‚ค; ์Šค๋ชจํฌ ์Šคํฌ๋ฆฐ; ํŽ˜์ดํฌ ์ŠคํŠธ๋ผ์ด์ปค
Monero cryptojacking malware sending mined currency to servers at Kim Il Sung University