2022-03
Andariel allegedly targeted a Connecticut healthcare company as part of a North Korean Reconnaissance General Bureau-linked conspiracy to hack and extort U.S. hospitals and health care providers using Maui ransomware. The charged activity included launder…
🇺🇸 United States
#Healthcare
#FinancialGain
2022-03
An Arkansas healthcare company was part of the alleged Andariel-linked Maui ransomware and extortion conspiracy charged by the U.S. Justice Department against North Korean operator Rim Jong Hyok. Prosecutors said the DPRK Reconnaissance General Bureau-lin…
🇺🇸 United States
#Healthcare
#FinancialGain
2022-02
Andariel allegedly included NASA-OIG among follow-on government targets in a broader North Korean operation funded by laundered ransom payments from Maui ransomware attacks against healthcare organizations. The indictment said the actors exploited unpatch…
🇺🇸 United States
#Government
#DataBreach
2022-01
Qubit Finance was exploited through a vulnerability in its QBridge deposit function that allowed the attacker to drain protocol assets, with linked analyses reporting losses around $77 million to $80 million. Subsequent reporting described the incident as…
🇬🇧 United Kingdom
#Cryptocurrency
#FinancialGain
2022-01
Andariel allegedly targeted a Chinese energy company in a wider North Korean Reconnaissance General Bureau-linked intrusion set that also involved healthcare ransomware, defense, technology, government, and manufacturing victims. U.S. prosecutors said the…
🇨🇳 China
#DataBreach
#Utility
2021-11
bZx suffered a phishing-driven compromise after a developer received a malicious Word document, leading to theft of the developer private key and unauthorized ownership changes on affected smart contracts. The attacker used the new contract owner to drain…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2021-10
Daewoo Shipbuilding & Marine Engineering was reportedly hacked for a third time, prompting a joint investigation by South Korean defense and intelligence authorities into a compromise of the company’s internal network. The victim’s role in building submar…
🇰🇷 Korea, Republic of
#DataBreach
#Espionage
#Defense
2021-10
MGNR disclosed that it was hit by a malicious and targeted cyberattack in which the likely entry point was a phishing email impersonating a recognized sender and carrying a fake document. The intrusion was believed to have installed a keylogger and stolen…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2021-08
Japanese cryptocurrency exchange Liquid reported a cyberattack in which its warm wallets were compromised and more than 70 different crypto assets were withdrawn. Follow-on tracking described stolen assets moving through centralized exchanges and DeFi swa…
🇯🇵 Japan
#Cryptocurrency
#FinancialGain
2021-07
Bondly Finance suffered a compromised-wallet incident that enabled an infinite-mint exploit, generating 373 million new BONDLY tokens and allowing the attacker to dump tokens and use minted assets as collateral on MANTRA DAO ZENTEREST. The attack drove a …
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2021-06
Fetch.ai alleged that fraudsters hacked its cryptocurrency accounts on Binance on June 6, leading London’s High Court to order Binance to identify the attackers and freeze associated accounts. The case centered on a reported $2.6 million cryptocurrency th…
🇬🇧 United Kingdom
#Cryptocurrency
#FinancialGain
2021-06
South Korean police attributed the 2021 Seoul National University Hospital breach to a North Korean hacking organization after investigating intrusions that used seven domestic and overseas servers as attack infrastructure from around May to June. The att…
🇰🇷 Korea, Republic of
#Healthcare
#DataBreach
2021-06
Korea Atomic Energy Research Institute confirmed that an unidentified external actor accessed some systems through a VPN system vulnerability, after which the institute blocked attacker IP addresses and applied VPN security updates. The institute said the…
🇰🇷 Korea, Republic of
#DataBreach
#Espionage
#Utility
2021-06
Korea Aerospace Industries was reportedly hacked twice in 2021, exposing KF-21 Boramae fighter design drawings and related defense technical information. The reporting said Korean police, military, and intelligence authorities were investigating the breac…
🇰🇷 Korea, Republic of
#DataBreach
#Espionage
#Defense
2021-05
FinNexus reported that its ERC-20 contract appeared to have been hacked, while some users alleged the event may have been a rug pull by the project itself. Later on-chain research by ZachXBT included FinNexus among cryptocurrency thefts traced to Lazarus …
🇻🇬 Virgin Islands, British
#Cryptocurrency
#FinancialGain