| 2015-12 | Guatemalan Financial Institution | Guatemala | Bluenoroff |
| On December 9, 2015 | Fraudulent wire transfers from the Vietnamese Bank | Vietnam | JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB) |
| 2015-01 | Banco del Austro | Ecuador | Bluenoroff |
| October 2015 | CSIS entry 990 | | |
| 01.10.2015 | North Korean Lazarus group conducts operations against banks in Vietnam and the Philippines starting in October 2015 | Philippines | Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110);Reconnaissance General Bureau |
| 2015 through 2019 | Cyber-Enabled Heists from Banks | Vietnam, Bangladesh, Taiwan, Mexico, Malta, and Africa | Jon Chang Hyok, Kim Il, Park Jin Hyok (RGB; Lazarus Group and APT38) |
| 2015.11 | 금융보안업체를 해킹, 인증서를 유출해 악성코드를 제작한 뒤 10개 기관 PC 19대에 악성코드 유포. | | 북한 |
| Beginning in or around November 2015 | Intrusion at the Philippine Bank (no fraudulent transfers) | Philippines | JON CHANG HYOK, KIM IL, PARK JIN HYOK and other hackers/conspirators (RGB) |
| since at least 2015 | BeagleBoyz attempted thefts total | | BeagleBoyz (overlap: Lazarus, APT38, Bluenoroff, Stardust Chollima) |
| 10/09/2015 | South Korea | KR | North Korea |
| 05/10/2015 | South Korea | KR | North Korea |
| 2015-11-18T16:25:41 | TDrop2 Attacks Suggest Dark Seoul Attackers Return | | |
| 2015-08-21 | 북한, 포격 도발 이어 사이버군 움직임 포착! | | |
| 2015-11-02 | IT threat evolution in Q3 2015 (DPRK-related paragraph 1) | | |