| 2014-12 | Sony Pictures Entertainment | United States | Lazarus |
| On December 2 and 3, 2014 | Spear-phishing of AMC Theatres employees | U.S. | JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB) |
| 2016 and 2017 | Spear-phishing of U.S. defense contractors including Lockheed Martin | | Park Jin Hyok; "Lazarus Group"; Chosun Expo Joint Venture |
| March 2016 through February 2020 | Spear-phishing of defense, energy, aerospace, technology, State Dept, DoD | | Jon Chang Hyok; Kim Il; Park Jin Hyok (RGB; Lazarus Group / APT38) |
| 2017-05 | WannaCry Ransomware | ZZZ, 🇷🇺 Russian Federation, 🇯🇵 Japan, 🇬🇧 United Kingdom, 🇫🇷 France, 🇰🇷 Korea, Republic of, 🇮🇳 India, 🇨🇳 China, 🇩🇪 Germany, 🇪🇸 Spain, 🇮🇩 Indonesia, 🇧🇷 Brazil, 🇺🇸 United States | Lazarus |
| May 2017; 2017 through 2020 | Ransomware and Cyber-Enabled Extortion (WannaCry 2.0 and extortion of victim companies) | | Jon Chang Hyok, Kim Il, Park Jin Hyok (RGB; Lazarus Group and APT38) |
| September 2018 | CSIS entry 814 | | |
| January 2019 | CSIS entry 760 | | |
| 18 Feb 2021 | Lazarus: Three North Koreans Charged for Financially Motivated Attacks | | |
| 2022-03 | Arkansas Healthcare Company | United States | Andariel |
| 2022-04 | Randolph Air Force Base | United States | Andariel |
| 2022-03 | Colorado Medical Clinic | United States | Andariel |
| 2022-07-19 (press release date) | Justice Department Seizes and Forfeits Approximately $500,000 from North Korean Ransomware Actors and their Conspirators | | |
| 2023-10-18 (press release date) | Justice Department Announces Court-Authorized Action to Disrupt Illicit Revenue Generation Efforts of Democratic People’s Republic of Korea Information Technology Workers | | |
| 2024-05-16 (press release date) | Charges and Seizures Brought in Fraud Scheme, Aimed at Denying Revenue for Workers Associated with North Korea | | |
| 2024-07-25 (press release date) | North Korean Government Hacker Charged for Involvement in Ransomware Attacks Targeting U.S. Hospitals and Health Care Providers | | |
| 2024-08-08 (press release date) | Justice Department Disrupts North Korean Remote IT Worker Fraud Schemes Through Charges and Arrest of Nashville Facilitator | | |
| 2024-12-12 (press release date) | Fourteen North Korean Nationals Indicted for Carrying Out Multi-Year Fraudulent Information Technology Worker Scheme and Related Extortions | | |
| 2025-01-23 (press release date) | Two North Korean Nationals and Three Facilitators Indicted for Multi-Year Fraudulent Remote Information Technology Worker Scheme that Generated Revenue for the Democratic People’s Republic of Korea | | |
| 2025-02-11 (press release date) | Arizona Woman Pleads Guilty in Fraud Scheme That Illegally Generated $17 Million in Revenue for North Korea | | |
| 2025-06-30 (press release date) | Justice Department Announces Coordinated, Nationwide Actions to Combat North Korean Remote Information Technology Workers’ Illicit Revenue Generation Schemes | | |
| 2025-06-30 (press release date) | Four North Koreans Charged in Nearly $1 Million Cryptocurrency Theft Scheme | | |
| 2025-06-30 (press release date) | Nine Charged with Alleged Scheme to Generate Revenue for North Korean Government and Its Weapons of Mass Destruction Program | | |
| 2025-11-13 (press release date) | Ukrainian Pleads Guilty in DC in Laptop Farm Scheme That Generated Income for North Korean IT Workers | | |
| 2025-11-14 (press release date) | Justice Department Announces Nationwide Actions to Combat Illicit North Korean Government Revenue Generation | | |
| 2026-01-08 (press release date) | New Jersey Man Pleads Guilty to Participating in Scheme to Generate Revenue for North Korean Weapons Programs | | |
| 2026-03-20 (press release date) | Three sentenced for facilitating computer access in North Korean sanctions evasion scheme | | |
| 2026-04-15 (press release date) | Two U.S. Nationals Sentenced for Facilitating Fraudulent Remote Information Technology Worker Scheme that Generated $5M in Revenue for the Democratic People’s Republic of Korea | | |
| 2026-05-06 (press release date) | Two U.S. Nationals Sentenced for Facilitating Fraudulent Remote Information Technology Worker Schemes to Generate Revenue for the Democratic People’s Republic of Korea | | |