| 2014-12 | Sony Pictures Entertainment | United States | Lazarus |
| 2014-12 | Korea Hydro and Nuclear Power | Korea, Republic of | Kimsuky |
| 2014-07 | Seoul Metro | Korea, Republic of | |
| On December 2 and 3, 2014 | Spear-phishing of AMC Theatres employees | U.S. | JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB) |
| 01.01.2014 | Reaper/APT37 vs. South Korean Targets | Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Democratic People's Republic of;Korea, Democratic People's Republic of;Korea, Democratic People's Republic of;Korea, Democratic People's Republic of | APT37/Richochet Chollima/Red Eyes/InkySquid/ScarCruft/Reaper/Group123/TEMP.Reaper/Venus 121/G0067;Group123 |
| 01.01.2014 | North korea prepare to attack against SK | Korea, Republic of;Korea, Republic of | Unknown |
| 2014.8 | 국내 IT 보안업체 제품의 취약성을 이용, 대학병원 전산망에 침입해 서버를 장악하고 사이버테러 준비. | | 북한 |
| Between 2014 and 2016 | Theft of ~40,000 files from a major South Korean defense company | | the North |
| At an unknown date in 2015 | Unauthorized access to Mammoth Screen computers | United Kingdom | JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB) |
| 2014; 2016; last year (2017) | Sony Pictures destructive attack; Bangladesh Bank theft; WannaCry 2.0 | | North Korea; Lazarus Group |
| November 2014; February 2016; May 2017 | Sony Pictures; Bank of Bangladesh; WannaCry 2.0 | | DPRK programmer (Park Jin Hyok) |
| 2014-05-07 | [알약 악성코드 분석리포트] Exploit.HWP.Agent | | Kimsuky |
| 2014-03-19 | APT 공격 – 새로운 “Kimsuky” 악성코드 등장 | | Kimsuky |
| 2014 | Japan case 1: individuals assisting North Korean IT workers | Japan | North Korean IT workers / North Korea-affiliated IT companies in China |