Name game: Decoding the dizzying diversity of monikers for North Korean hackers



Analysis Name game: Decoding the dizzying diversity of monikers for North Korean hackers DPRK secrecy has bred taxonomic confusion, with different researchers using different names for even same threat groups Shreyas Reddy September 17, 2024 SHARE COPY LINK FACEBOOK X LINKEDIN MASTODON An illustration of names for North Korean threat actors \| Image: NK Pro Lazarus. Kimsuky. Andariel. BlueNoroff. Scarcruft. H0lyGh0st. The names range from Biblical allusions to fantasy characters, and they identify North Korean cybercriminal cliques that steal cryptocurrency, compromise critical infrastructure and generally wreak havoc in pursuit of the regime’s goals. Yet the dizzying array of appellations that have emerged for DPRK cyber syndicates over the past decade can be a source of confusion as much as clarity for the layperson, with different security firms each using their own system. The situation is not helped by the use of vastly different nomenclature rules Read More © Korea Risk Group. All rights reserved. No part of this content may be reproduced, distributed, or used for commercial purposes without prior written permission from Korea Risk Group. LATEST ANALYSIS 01Drone drama: What to make of North Korean claims about ROK aerial ‘intrusions’ 02Unpacking North Korea’s silence on redefining its border with the South 03How Iran’s massive missile salvo on Israel previews North Korean tactics 04Where things stand with North Korea’s unfinished crusade against reunification 05Shigeru Ishiba’s ambitions for nuke sharing to deter North Korea face long odds 06Why Seoul needs to do more to spotlight North Korea’s defiance of cyber norms 07What to make of North Korea and Vietnam’s push to bolster military ties 08Fraying ties: Quantifying the apparent deterioration in DPRK-China relations

Analysis

Name game: Decoding the dizzying diversity of monikers for North Korean hackers

DPRK secrecy has bred taxonomic confusion, with different researchers using different names for even same threat groups

Shreyas Reddy September 17, 2024

Name game: Decoding the dizzying diversity of monikers for North Korean hackers

An illustration of names for North Korean threat actors | Image: NK Pro

Lazarus. Kimsuky. Andariel. BlueNoroff. Scarcruft. H0lyGh0st.

The names range from Biblical allusions to fantasy characters, and they identify North Korean cybercriminal cliques that steal cryptocurrency, compromise critical infrastructure and generally wreak havoc in pursuit of the regime’s goals.

Yet the dizzying array of appellations that have emerged for DPRK cyber syndicates over the past decade can be a source of confusion as much as clarity for the layperson, with different security firms each using their own system.

The situation is not helped by the use of vastly different nomenclature rules

01Drone drama: What to make of North Korean claims about ROK aerial ‘intrusions’
02Unpacking North Korea’s silence on redefining its border with the South
03How Iran’s massive missile salvo on Israel previews North Korean tactics
04Where things stand with North Korea’s unfinished crusade against reunification
05Shigeru Ishiba’s ambitions for nuke sharing to deter North Korea face long odds
06Why Seoul needs to do more to spotlight North Korea’s defiance of cyber norms
07What to make of North Korea and Vietnam’s push to bolster military ties
08Fraying ties: Quantifying the apparent deterioration in DPRK-China relations

Name game: Decoding the dizzying diversity of monikers for North Korean hackers

LATEST ANALYSIS

Similar Articles

About the Author

Shreyas Reddy