| 2021-06 | Korea Aerospace Industries | Korea, Republic of | Kimsuky |
| 2021-06 | Korea Atomic Energy Research Institute | Korea, Republic of | |
| January 2022 | CSIS entry 396 | | |
| 2021-03 | Lazarus Attack Activities Targeting Japan (VSingle/ValeforBeta) | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| Apr 2021 | Targeting of South African freight companies | South African shipping companies | Lazarus Group |
| since the start of 2021 | 350 instances of cyberactivity against one Member State government institution | | |
| Feb 2022 | Targeting of the International Atomic Energy Agency and South Korean defense contractor | The International Atomic Energy Agency and Korea Aerospace Industries, a South Korean defense contractor | Kimsuky |
| TA406 and TA427 campaigns using false email accounts impersonating individuals and entities | Republic of Korea; United States; Russian Federation (identities used) | “TA406” and “TA427”, cyberactors associated with Kimsuky |
| Hacking attempts and phishing messages against the Panel | | cyberactors of the DPRK |
| Cyber theft of technological information for the Hwasong-8 hypersonic missile | | DPRK cyber hackers (per a Member State) |