G0032

2017-05-31 • MITRE • Lazarus Group

G0032 is the MITRE ATT&CK group identifier for Lazarus Group, also represented under names including Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace, ZINC, and Diamond Sleet. ATT&CK records activity such as acquiring campaign domains and servers, hosting malicious downloads on GitHub, using cloud file-hosting services, harvesting credentials, and communicating over HTTP and HTTPS.

Related Actors

Related Reports in This Cluster

Top Authors

View G0032 reports only

2026-08-16
Decryption Digest
#Lazarus #CVE-2026-68820 #DreamJob #FudModule #MISTPEN #ForestTiger
2026-08-11
Checkpoint
#DreamJob #Lazarus #MISTPEN #FudModule #CVE-2026-68820 #ForestTiger #Troy
2026-08-07
Bybit
#Bybit #Lazarus
2026-08-06
Ahnlab
#Xctdoor #Phishing #LNK #CRAT #Larva-26005 #CVE-2017-8291 #Hansom
2026-08-06
Ahnlab
#Xctdoor #Phishing #LNK #CVE-2017-8291 #CRAT #Larva-26005 #Hansom
2026-07-29
Ascen Cripto
#Lazarus #Cryptocurrency #Bybit #DMM
2026-07-15
Qihoo360
#APT-C-26
2026-07-07
Slowmist
#Trend #Lazarus #MoneyLaundering
2026-07-06
FSI
#Lazarus #Cryptocurrency #AxieInfinity #Harmony #OrbitBridge #KelpDAO #MoneyLaundering
2026-07-01
S2W
#Lazarus #TraderTraitor #Cryptocurrency #MoneyLaundering #Bybit
2026-06-30
Jfrog
#Lazarus #SupplyChain #NPM
2026-06-25
Open Source Malware
#Lazarus #SupplyChain #NPM #PyPI #Cryptocurrency #Podcast
2026-06-25
Cyfirma
#Lazarus #Kimsuky #Andariel #SapphireSleet #Trend
2026-06-23
Cognyte
#Lazarus #Fileless #RemotePE #YARA #T1055 #T1027 #T1027.007 #T1105
2026-06-22
Melted In Hex
#Lazarus #PolinRider #BeaverTail #InvisibleFerret #NPM #EtherHiding

View G0032 reports only