| 2007 | Possible 2007 attack targeting South Korea | | Lazarus Group |
| 2009-07 | 7.7 DDoS | United States, 🇰🇷 Korea, Republic of | |
| 2009 to 2012 | Operation Troy | | Lazarus Group |
| 2011-03 | 3.4 DDoS | Korea, Republic of, 🇺🇸 United States | |
| 2013-03 | 3.20 Cyber Terror | Korea, Republic of | WHOis Team |
| 2013 | Malicious gaming app infecting South Korean smartphones | | North Korea |
| 2014-12 | Sony Pictures Entertainment | United States | Lazarus |
| 2014-12 | Korea Hydro and Nuclear Power | Korea, Republic of | Kimsuky |
| 2017-05 | WannaCry Ransomware | ZZZ, 🇷🇺 Russian Federation, 🇯🇵 Japan, 🇬🇧 United Kingdom, 🇫🇷 France, 🇰🇷 Korea, Republic of, 🇮🇳 India, 🇨🇳 China, 🇩🇪 Germany, 🇪🇸 Spain, 🇮🇩 Indonesia, 🇧🇷 Brazil, 🇺🇸 United States | Lazarus |
| August 2019 | Targeting of retired South Korean diplomats, government and military officials | | Kimsuky |
| 2021-01-25T23:59:00+00:00 (datePublished) | Campaign targeting security researchers (fake research blog, Twitter profiles, Visual Studio projects) | | government-backed entity based in North Korea |
| November 2020 | CSIS entry 539 | | |
| mid-March 2020 | “Security alert”-themed spear-phishing of 28 individuals including 11 officials from six Security Council members | | Kimsuky advanced persistent threat group |
| 2021-06 | Korea Atomic Energy Research Institute | Korea, Republic of | |
| 2021-01-05T17:00:00+00:00 | Retrohunting APT37: VBA self decode technique to inject RokRat | | APT37 |
| August 2023 | CSIS entry 201 | | |