Group77
2016-02-24 • Cisco Talos • Operation Blockbuster: Coverage for the Lazarus G…
Group77 is an alias associated with the Lazarus Group, the North Korean state-sponsored threat actor. Cisco Talos referenced the name in 2016 while summarizing Novetta's Operation Blockbuster research, which linked a cluster of related malware families to a single group of threat actors behind multiple high-profile attacks carried out over roughly nine years. In 2019 the U.S. Treasury's Office of Foreign Assets Control formally listed GROUP 77 as one of numerous aliases for the sanctioned entity Lazarus Group, alongside names such as Hidden Cobra, Guardians of Peace, and Zinc, identifying the group as based in Pyongyang's Potonggang District and subject to North Korea sanctions regulations. Group77 is therefore best understood not as a distinct organization but as one of several public labels applied to the broader Lazarus Group activity attributed to North Korea's state cyber apparatus.
-
60
Related Actors
-
690
Related Reports