Cybersecurity incident — 2019-08-22 00:00:00
Affected organization: South African Department of International Relations and Cooperation
Affected country: South Africa
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of End Hosts
Motive: Political-Espionage
Actor: NGB 3rd Technical Surveillance Bureau
Actor type: Nation-State
Actor country: Korea (the Democratic People's Republic of)

A threat actor targeted a number of foreign ministries, a Chinese technology company, Stanford University, think tanks in the United States and the United Kingdom, and other entities that have focused on North Korea's nuclear efforts or the related international sanctions. The threat actor created a network of malicious websites imitating the login portals of targets.