| 2021-08-17T16:15:15+00:00 (published_time) | InkySquid strategic web compromise of Daily NK delivering BLUELIGHT (late March to early June 2021) | South Korean | InkySquid (ScarCruft, APT37) |
| 2021-08-24T15:43:30+00:00 (published_time) | InkySquid BLUELIGHT and RokRAT infection of an individual frequently targeted by North Korean actors | | InkySquid (ScarCruft/APT37) |
| 2022-12-01T15:41:19+00:00 (published_time) | Lazarus Group AppleJeus campaign via fake BloxHolder cryptocurrency trading website and malicious Office documents | | Lazarus Group |
| 2022-07-28T09:39:56+00:00 (published_time) | SharpTongue SHARPEXT mail-stealing browser extension incidents (since September 2021) | | SharpTongue (Kimsuky) |
| 2023-03-30T11:37:54+00:00 (published_time) | 3CX Desktop App supply chain compromise (ICONIC) | | UTA0040, later attributed to Lazarus |