Chosun Expo (APT 38)

  • Overview
  • Names
  • Addresses
  • Entity
  • Data Source
  • Overview of Chosun Expo (APT 38)

    IDCYB0004
    Sanction RegimeThe Cyber (Sanctions) (EU Exit) Regulations 2020
    Designation SourceUK
    Other Information

    The Director Disqualification Sanction was imposed on 09/04/2025.

    Imposed SanctionsAsset freeze
    Last UpdatedApr 09, 2025
    UK Statement of Reasons The Lazarus Group was responsible for relevant cyber activity that resulted in data interference which directly or indirectly caused, or is intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity through stealing money from Bangladesh Bank, attempting to steal money from Vietnam Tien Phong Bank and targeting the Polish Financial Conduct Authority information systems. Through the WannaCry attack they undermined the integrity of the United Kingdom through interfering with an information system so that it prevented the provision of essential healthcare services to the population.
    OFSI Group ID13910

    What alternative names has Chosun Expo (APT 38) used?

    NameTitleName TypeNon-Latin NameAlias Strength
    Chosun Expo (APT 38)Primary name
    Chosen ExpoAlias
    Korean Export Joint VentureAlias

    Where is Chosun Expo (APT 38) located?

    AddressPostal CodeCountryEmail AddressPhone NumberWebsite
    North Korea

    What type of entity is Chosun Expo (APT 38)?

    Business Registration NumbersParent CompanySubsidiariesType of Entity
    Reconnaissance General BureauCompany

    Data Source

    • The UK Sanctions List
      A list maintained by the UK Government that identifies individuals and entities subject to financial sanctions. The list includes information on the reasons for the sanctions and the restrictions that apply.
    • license: CC0