Everyday is lazarus.dayβ


"NICKEL FOXCROFT is a targeted threat group that CTU researchers assess with moderate confidence conducts espionage on behalf of the North Korean government. It appears to focus exclusively on targets in South Korea, particularly individuals and organizations involved in reporting on North Korea, researching geopolitics on the Korean peninsula, or supporting defectors."

- SecureWorks,

Also known as

Name Named by AKA First seen Last seen
APT-C-28 Qihoo360 ScarCruft 2019-06-01 2024-01-30
APT37 Mandiant ScarCruft 2018-02-20 2024-02-05
Group123 CiscoTalos ScarCruft 2018-01-16 2023-07-11
ITG10 IBM ScarCruft 2021-10-23 2023-06-06
InkySquid Volexity ScarCruft 2021-08-17 2023-01-04
NickelFoxcroft SecureWorks ScarCruft - -
RedEyes Ahnlab ScarCruft 2018-02-21 2023-11-13
RicochetChollima CrowdStrike ScarCruft 2019-02-19 2019-02-19
ScarCruft Kaspersky - 2016-06-17 2024-02-16
TEMP.Reaper Mandiant ScarCruft 2018-02-03 2023-09-07
금성121 ESTSecurity ScarCruft 2018-07-04 2023-09-19