Lazarus's timeline in 2026-lazarusholic

2026-04-07
Walmart
Mapping Ottercookie Infrastructure
#OtterCookie

2026-04-07
Zscaler
Blurred Lines of Cyber Threat Attribution: The Evolving Tactics of North Korean Cyber Threat Actors
#Kimsuky #Lazarus #Slides

2026-04-06
PolySwarm
The Axios Breach: When npm Trust Becomes an APT Attack Vector
#Axios #NPM #UNC1069

2026-04-05
BreakGlassIntelligence
Ten Operators, Nine Campaigns, and a Backend With No Password: How a Single Vercel URL Exposed a Two-Year Korean Phishing Syndicate
#Kimsuky #Phishing

2026-04-05
DriftProtocol
Incident Background Update
#DriftProtocol #UNC4736

2026-04-04
Resecurity
Supply Chain Malware Alert: plain-crypto-js Compromises Axios Packages
#Axios #NPM

2026-04-04
CyberAndRamen
OtterCookie Expands Targeting to AI Coding Tools
#NPM #OtterCookie

2026-04-03
Panther
jsonspack: Multi-Tenant Node.js RAT â DPRK Supply Chain Campaign
#FamousChollima #NPM

2026-04-03
DCSO
From Axios NPM Supply Chain Attack to Tracking DPRK’s BlueNoroff
#Axios #BlueNoroff #NPM

2026-04-03
CiscoTalos
Axios NPM supply chain incident
#Axios #NPM

2026-04-03
Socket
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
#Axios #NPM

2026-04-03
Domaintools
DPRK Malware Modularity: Diversity and Functional Specialization
#Andariel #Kimsuky #Lazarus #Trend

2026-04-03
NVISO
Axios npm attack: rapid hunting with KQL and response guide
#Axios #NPM

2026-04-03
Trmlabs
North Korean Hackers Attack Drift Protocol In USD 285 Million Heist
#DriftProtocol

2026-04-02
SafeDep
Malicious npm Package express-session-js Drops Full RAT Payload
#ContagiousInterview #NPM

2026-04-02
Flare
Code Names, Fake Personas, and Iranian Recruits: New Details from Inside the NKITW Operation
#ITWorker

2026-04-02
Elastic
How we caught the Axios supply chain attack
#Axios #NPM

2026-04-02
Veracode
Breaking Down the Axios Supply Chain Attack
#Axios #NPM

2026-04-02
Fortinet
DPRK-Related Campaigns with LNK and GitHub C2
#LNK #XenoRAT #GitHub

2026-04-02
Socket
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
#Axios #NPM

lazarusholic