The name of a group with which the Council of the EU linked the North Korean entity Chosun Expo in connection with the WannaCry attack.
According to Council Decision 2020/1127, Chosun Expo can be linked to APT38/Lazarus Group through, among other things, the accounts used for the attacks; WannaCry disrupted systems around the world by hitting them with ransomware.1
Sources
- Council of the European Union, Council Decision (CFSP) 2020/1127 of 30 July 2020 (sanctions for cyber-attacks), recitals and annex
Checked: 3 November 2026