North Korean Reconnaissance General Bureau 3rd Bureau
| Actor Type | Nation State |
|---|---|
| Attributed to Nation | North Korea |
| Associated Intrusion Sets | Onyx Sleet , Andariel |
North Korea's Reconnaissance General Bureau (RGB) 3rd Bureau is reported by the FBI and other international agencies as an entity based in Pyongyang and Sinuiju which conducts state-sponsored cyber activity.
The 3rd Bureau has been linked to the intrusion set Andariel as well as APT38 and TEMP.Hermit.
According to Google's Mandiant, the 3rd Bureau is responsible for foreign intelligence. Underneath the 3rd Bureau, Lab110 is reported as the home of a lot of the actor's cyber activity, operating out of front companies historically based in northeast China.
Cyber Threat Graph Context
Explore how this cyber threat actor relates to the wider threat graph
North Korean Reconnaissance General Bureau 3rd Bureau Threat Reports
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
This cybersecurity advisory from the U.S. Federal Bureau of Investigation (FBI) and its partners, highlights the cyber espionage activities of the ...