lazarusholic

Everyday is lazarus.dayβ

BlueNoroff

Lazarus Under The Hood

2017-04-03, Kaspersky
Lazarus Under The Hood
"A subgroup of Lazarus Group, Hidden Cobra, Labyrinth Chollima."

- ETDA, https://apt.etda.or.th/cgi-bin/showcard.cgi?u=a979f6ac-99b3-4810-9362-94187db06784
"Bluenoroff Threat Actor Intelligence Profile"

- Cybergeist, https://cybergeist.io/profile/bluenoroff

Also known as

 
Name Named by AKA First seen Last seen
APT38 Mandiant BlueNoroff 2018-10-03 2023-10-10
ATK117 ThalesGroup APT38 2019-10-07 2022-05-31
BeagleBoyz USCISA BlueNoroff 2020-08-26 2021-03-04
BlackAlicanto PWC CryptoCore 2021-09-08 2023-04-12
BlackDev2 PWC BlueNoroff 2021-09-08 2023-04-12
BlueNoroff Kaspersky - 2017-04-03 2024-03-07
CTG-6459 SecureWorks NickelGladstone - -
Copernicium Microsoft APT38 2022-11-07 2022-11-07
CryptoCore Clearskysec BlueNoroff 2020-06-24 2021-05-24
CryptoMimic NTTSecurity CryptoCore 2020-09-30 2021-02-01
G0082 MITRE APT38 2019-01-29 2019-01-29
JadeSleet Microsoft TraderTraitor 2023-07-18 2024-06-13
LeeryTurtle Cyberstruggle CryptoCore - 2020-05-06
NickelGladstone SecureWorks BlueNoroff - -
PUKCHONG Google UNC4899 2024-06-12 2024-06-12
REF9135 Elastic BlueNoroff 2023-06-29 2023-06-29
RedCarpet KRCERT BlueNoroff - -
SapphireSleet Microsoft Copernicium 2023-04-19 2023-10-06
StardustChollima CrowdStrike BlueNoroff 2018-02-26 2019-02-19
T-APT-15 Tencent BlueNoroff 2018-03-07 2018-03-07
TA444 Proofpoint CryptoCore 2021-10-27 2024-01-04
TAG-71 Recordedfuture BlueNoroff 2023-06-06 2024-01-10
TEMP.Hermit Fireeye BlueNoroff 2017-09-13 2023-10-10
TraderTraitor USCISA BlueNoroff 2022-04-18 2023-08-22
UNC1069 Mandiant CryptoCore 2023-04-18 2023-10-10
UNC1758 Mandiant TEMP.Hermit 2023-04-18 2023-04-18
UNC2970 Mandiant TEMP.Hermit 2023-03-09 2023-03-09
UNC4034 Mandiant TEMP.Hermit 2022-09-14 2022-11-03
UNC4899 Mandiant TraderTraitor 2023-07-24 2024-06-12
UNC577 Mandiant TEMP.Hermit 2023-03-09 2023-03-09
UNC785 Mandiant TEMP.Hermit 2023-03-28 2023-03-28
UNC786 Mandiant TEMP.Hermit 2023-03-28 2023-03-28

Reports