North Korea (DPRK) Cyber Operations Groups

2021-04-24 xorl

https://xorl.wordpress.com/2021/04/24/north-korea-dprk-cyber-operations-groups/

Thumbnail for North Korea (DPRK) Cyber Operations Groups

The source maintains a live mapping of DPRK cyber operations groups and their relationships to North Korean state organizations. It frames the content as a reference diagram for known offensive cyber-capable APT groups, updated through March 2022 with sources such as Mandiant, Recorded Future, CISA, DOJ, Microsoft, ASEC and other public reporting. Rather than describing a single intrusion, the report is useful as an attribution and taxonomy aid for tracking Lazarus, Kimsuky, BeagleBoyz/FASTCash, AppleJeus and other DPRK-linked activity across the public CTI record.

« Back