| since March 2020 | VHD, BEAF, PXJ, ZZZZ and ChiChi ransomware | | BlueNoroff (also known as APT38) (code similarities) |
| since July 2020 | Voice phishing hacking applications sold by Song Rim (continued) | China; Republic of Korea | Song Rim (Munitions Industry Department-linked IT worker) |
| 2022-07 | Maui Ransomware | United States, ๐ฏ๐ต Japan | Andariel |
| 2022-03 | Arkansas Healthcare Company | United States | Andariel |
| 2022-06 | Harmony Bridge | United States | |
| 2022-03 | Axie Infinity | Viet Nam | |
| 2022-03 | Colorado Medical Clinic | United States | Andariel |
| April 2022 | CSIS entry 353 | | |
| 19 May 2022 | Lazarus Group Exploiting Log4Shell Vulnerability (NukeSped) - ASEC BLOG (ahnlab.com) | | Lazarus Group |
| 27 Apr 2022 | Stonefly: North Korea-linked Spying Operation Continues to Hit High-value Targets | | |
| 2022-01-13T09:00:23 | The BlueNoroff cryptocurrency hunt is still on | | |
| 31/03/2022 | Cryptocurrency users and investors. | >1 | Lazarus Group |
| 08/02/2022 | Organizations in South Korea | KR | Kimsuky AKA TA406 |
| 2022-02-14 | ๋๋ถ๊ด๋ จ ์๊ณ ์๊ตฌ์ฌํญ์ ๊ฐ์ฅํ APT ๊ณต๊ฒฉ์๋ (Kimsuky) | | Kimsuky |
| 2022-03-22 | ์ฝ์ธ๊ด๋ จ ๋ด์ฉ์ ์๋๋ฌธ์๋ฅผ ์ด์ฉํ APT ๊ณต๊ฒฉ (Kimsuky) | | Kimsuky |
| 2022-03-23 | PDF ๋ฌธ์๋ก ์์ฅํ์ฌ ์ ํฌ๋๋ VBS ์คํฌ๋ฆฝํธ (Kimsuky) | | Kimsuky |
| 2022-03-29 | ์ธ์ง ์ฐ๋ถ ํผํด ๊ธฐ๋ถ ์์์ฆ์ผ๋ก ์์ฅํ ์๋ ๋ฌธ์ APT ๊ณต๊ฒฉ (Kimsuky) | | Kimsuky |
| 2022-04-18 | INITECH ํ๋ก์ธ์ค์ ์ธ์ ์
๋ผ ๋์ํ๋ ๋ผ์๋ฃจ์ค ๊ณต๊ฒฉ ๊ทธ๋ฃน์ ์ ์ข
์
์ฑ์ฝ๋ | | Lazarus; ๋ผ์๋ฃจ์ค |
| 2022-05-18 | ๋ค์ํ ์ฃผ์ ์ ๋ณด๋์๋ฃ๋ฅผ ์ฌ์นญํ Kimsuky ๊ณต๊ฒฉ์๋ | | Kimsuky |
| Kimsuky attacks on political institutions using โKONNIโ RAT; spoofed phishing emails to the Panel | | Kimsuky |