North Korea hasn't stopped launching cyberattacks amid peace talksCyberScoop·May 30, 21:17 UTC · May 30, 2018Exploit / PoC in the wild60
U.S. CERT issues report on remote hacking tool used by North KoreaCyberScoop·Nov 14, 21:18 UTC · Nov 14, 2017Exploit / PoC in the wild60
FBI, DHS to go public with suspected North Korean hacking toolsCyberScoop·May 12, 13:48 UTC · May 12, 2020Exploit / PoC in the wild60
Microsoft fixes two actively exploited zero-days (CVE-2025-21418, CVE-2025-21391)Help Net Security·Feb 11, 00:00 UTC · Feb 11, 2025Exploit / PoC in the wildCVE-2025-21418CVE-2025-21391CVE-2024-38193+3 CVEs260
North Korea-linked APT Citrine Sleet exploit Chrome zero-day to deliver FudModule rootkitSecurity Affairs·Aug 31, 18:22 UTC · Aug 31, 2024Exploit / PoCCVE-2024-7971CVE-2024-3810660
N. Korean Hackers Targeting Security Experts to Steal Undisclosed ResearchesThe Hacker News·Apr 1, 07:14 UTC · Apr 1, 2021Exploit / PoCCVE-2021-164760
Suspected North Korean hackers who targeted job applicants prove more ambitious than first believedCyberScoop·Nov 6, 16:21 UTC · Nov 6, 2020Exploit / PoC in the wild60
Pentagon, FBI, DHS jointly expose a North Korean hacking effortCyberScoop·Feb 14, 21:50 UTC · Feb 14, 2020Exploit / PoC in the wild60