2020-07
Kaspersky linked VHD ransomware operations to Lazarus after incident-response evidence found the MATA framework backdoor in the same victim environment and no sign of another actor during the intrusion. The campaign used victim-specific spreading utilitie…
ZZZ
#FinancialGain
2020-07
The KAMS incident involved a malicious HWP document distributed through a notice associated with the Korea healthcare sector, with linked metadata classifying the activity as a watering-hole-style compromise and data-breach event. The available evidence s…
🇰🇷 Korea, Republic of
#Wateringhole
#Healthcare
#DataBreach
2020-02
Bank Rakyat Indonesia was reported to have been targeted by Lazarus in February 2020. Carnegie's financial-sector incident timeline says attackers likely gained access to the bank's networks using BEEFEATER, malware previously associated with the Banglade…
🇮🇩 Indonesia
#Finance
#FinancialGain
2019-11
Upbit suffered a cryptocurrency-exchange breach on 27 November 2019 when 342,000 ETH was transferred from its Ethereum hot wallet to attacker-controlled addresses, prompting service suspensions, cold-wallet transfers, and exchange-side tracing. Subsequent…
🇰🇷 Korea, Republic of
#Cryptocurrency
#FinancialGain
2019-10
The Kudankulam Nuclear Power Plant incident involved malware on KKNPP's administrative network in India, with DTrack/Preft samples configured for information theft using victim-specific internal paths, credentials, compression of collected data, and attem…
🇮🇳 India
#Espionage
#Utility
2019-09
Algo Capital disclosed that wallets administered by its former CTO were compromised after a sophisticated remote-access compromise of the administrator's mobile phone exposed recovery seed backup data, enabling theft from fund, company, and personal holdi…
🇬🇧 United Kingdom
#Cryptocurrency
#FinancialGain
2019-09
Kaspersky's Dtrack research began with ATMDtrack malware targeting Indian ATMs and expanded into more than 180 related Dtrack samples used against India's financial sector and research centers. The tooling used encrypted overlay payloads, runtime decrypti…
🇮🇳 India
#Finance
#ATM
#FinancialGain
2019-09
The Magyar Fejlesztési Központ incident destroyed the Hungarian Development Center's server environment and digital records, forcing the organization to rebuild its administration after losing contracts, invoices, business software, and other operational …
🇭🇺 Hungary
#Government
#Destruction
2019-07
The MarkAny incident involved malware distributed with a valid digital signature from a Korean DRM and document-security vendor, increasing the likelihood of bypassing trust-based controls. After infection the malware created a scheduled task named "Jav M…
🇰🇷 Korea, Republic of
#SupplyChain
#Technology
2019-07
Bitpoint halted services after detecting suspicious Ripple remittance activity and later determined that attackers had stolen cryptocurrency from both customer and company holdings across Bitcoin, Bitcoin Cash, Litecoin, Ethereum, and XRP. The Japan-based…
🇯🇵 Japan
#Cryptocurrency
#FinancialGain
2019-07
CoinTiger is linked in U.S. virtual-currency forfeiture and UN Panel reporting to 2019 cryptocurrency-laundering activity connected to funds stolen from exchanges and other hacks. The available evidence places the Singapore-based exchange in the broader D…
🇸🇬 Singapore
#Cryptocurrency
#FinancialGain
2019-03
Bithumb detected an abnormal withdrawal of company-owned cryptocurrency through its monitoring system on March 29, 2019, then blocked deposits and withdrawals while moving remaining assets into cold wallets. The exchange stated that member assets were pro…
🇰🇷 Korea, Republic of
#Cryptocurrency
#Suspicious
#FinancialGain
2019-03
Kuwait Bank is included in UN Panel of Experts reporting on DPRK cyber operations against financial institutions and cryptocurrency exchanges for revenue generation and sanctions evasion. The linked evidence does not describe the bank-specific intrusion c…
🇰🇼 Kuwait
#Finance
#FinancialGain
2019-03
The UN Panel of Experts listed BiKi among suspected DPRK cyberattacks on cryptocurrency-related companies, recording a 26 March 2019 incident against the Singapore-based exchange with an estimated USD 12.3 million stolen. The listing appears in the Panel'…
🇸🇬 Singapore
#Cryptocurrency
#FinancialGain
2019-03
CoinBene was reported to have suffered a March 2019 cryptocurrency theft involving 107 ERC-20-based assets, with blockchain analysis tracing stolen funds through attacker wallets, intermediary sweeping addresses, and exchanges including Huobi, EtherDelta,…
🇯🇵 Japan
#Cryptocurrency
#FinancialGain