DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

UN Panel of Experts S/2020/840 (5)

Date (as written)IncidentCountryActors
2019-10Kudankulam Nuclear Power PlantIndiaLazarus
mid-March 2020“Security alert”-themed spear-phishing of 28 individuals including 11 officials from six Security Council membersKimsuky advanced persistent threat group
2020Campaign targeting the aeronautics and defence sectors (fake LinkedIn recruiters; ESET “Operation In(ter)ception”)Lazarus
March and early April 2020Spear-phishing of more than 40 official email addresses of a Member State’s executive branch; WhatsApp targetingDemocratic People’s Republic of Korea cyberthreat actors
2020Phishing emails to Panel experts (fake UN security alert; fake journal editor)