| 2013-06 | 6.25 Cyber Terror | Korea, Republic of | Lazarus |
| 2013-03 | 3.20 Cyber Terror | Korea, Republic of | WHOis Team |
| September 2013 | CSIS entry 1058 | | |
| 01.01.2013 | Operation“Kimsuky” | Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;China;China;China;China | Kimsuky/Velvet Chollima/STOLEN PENCIL/Emerald Sleet fka THALLIUM/Black Banshee/G0094 |
| 2013-05 | South Korean Financial Companies Targeted by Castov | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 4/4/2013 | OpTroy Defense Contractor breach | N Korea / S Korea | |
| 10/20/2013 | OnionDog | N Korea / S Korea | |
| 2013 | Malicious gaming app infecting South Korean smartphones | | North Korea |
| March 25, 2013 | DailyNK, Free North Korea Radio, Nknet, North Korea Intellectuals Society website disrupted | | North Korea (commonly associated) |
| Since at least 2013 | Volgmer malware campaign (government, financial, automotive, media) | | HIDDEN COBRA |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 1) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 2) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 3) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 4) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 5) | | |
| 2013-11-14 | IT Threat Evolution: Q3 2013 (DPRK-related paragraph 6) | | |