DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

US DOJ press release 2021-02-17 (Jon Chang Hyok, Kim Il, Park Jin Hyok indictment) (8)

Date (as written)IncidentCountryActors
2015 through 2019Cyber-Enabled Heists from BanksVietnam, Bangladesh, Taiwan, Mexico, Malta, and AfricaJon Chang Hyok, Kim Il, Park Jin Hyok (RGB; Lazarus Group and APT38)
2017-12NiceHashSloveniaBluenoroff
May 2017; 2017 through 2020Ransomware and Cyber-Enabled Extortion (WannaCry 2.0 and extortion of victim companies)Jon Chang Hyok, Kim Il, Park Jin Hyok (RGB; Lazarus Group and APT38)
2018-10BankIslamiPakistanHidden Cobra
2018-09IndodaxIndonesiaBluenoroff
2018ATM cash-out operation, a bank in IndiaIndiaNorth Korean co-conspirators
2019-02Bank of VallettaMalta
18 Feb 2021Lazarus: Three North Koreans Charged for Financially Motivated Attacks