lazarusholic

Everyday is lazarus.dayβ

Kaspersky

@Kaspersky, https://securelist.com

Actors

Name Named by AKA First seen Last seen
AppleJeus Kaspersky CitrineSleet 2018-08-23 2026-05-12
BlueNoroff Kaspersky - 2017-04-03 2026-04-27
Kimsuky Kaspersky - 2013-09-11 2026-06-16
ScarCruft Kaspersky - 2016-06-17 2026-05-28

Reports

2026-05-14
Kaspersky
Disclosing new PebbleDash-based tools by Kimsuky
#Kimsuky #PebbleDash #VSCode
2026-04-09
Kaspersky
The axios attack is an extension of the GhostCall campaign by BlueNoroff
#Axios #BlueNoroff #NPM #GhostCall #SysPhon
2025-10-28
Kaspersky
BlueNoroff's latest campaigns: GhostCall and GhostHire
#BlueNoroff #macOS #GhostCall #GhostHire #SysPhon
2025-04-24
Kaspersky
Lazarus APT updates its toolset in watering hole attacks
#Innorix #LPEClient #Lazarus #SIGNBT #SyncHole #ThreatNeedle #AGAMEMNON #CrossEX
2024-12-19
Kaspersky
Lazarus targets nuclear-related organization with new malware
#CookiePlus #CookieTime #Lazarus
2024-11-28
Kaspersky
APT trends report Q3 2024
#Kimsuky #TOGREASE #Trend
2024-10-23
Kaspersky
Lazarus APT steals cryptocurrency and user data via a decoy MOBA game
#CVE-2024-4947 #DeFiTankLand #Lazarus #Manuscrypt #BlueNoroff
2024-10-03
Kaspersky
APT and financial attacks on industrial organizations in Q2 2024
#Andariel #Kimsuky #LilacSquid #MoonstoneSleet #SmallTiger #Trend #Xctdoor
2024-05-09
Kaspersky
APT trends report Q1 2024
#Trend #NPM #Andariel #ThreatNeedle #Kimsuky #AppleSeed #Durian
2023-12-05
Kaspersky
New BlueNoroff loader for macOS
#RustBucket #BlueNoroff #macOS
2023-11-02
Kaspersky
How AI can be used by attackers and defenders?
#Slides
2023-10-27
Kaspersky
A cascade of compromise: unveiling Lazarus' new campaign
#LPEClient #SIGNBT
2023-10-18
Kaspersky
Updated MATA attacks industrial companies in Eastern Europe
#MATA
2023-10-17
Kaspersky
APT trends report Q3 2023
#Trend #ScarCruft
2023-09-25
Kaspersky
APT and financial attacks on industrial organizations in H1 2023
#Trend
2023-08-30
Kaspersky
IT threat evolution Q2 2023
#3CXDesktopApp #Trend #Andariel #DeathNote
2023-07-27
Kaspersky
APT trends report Q2 2023
#BlueNoroff #Trend
2023-06-28
Kaspersky
Andariel’s silly mistakes and a new malware family
#Andariel #EarlyRat
2023-06-06
Kaspersky
The North Korean AV Anthology: a unique look on DPRK’s Anti-Virus market
2023-04-27
Kaspersky
APT trends report Q1 2023
#Trend #Andariel #ScarCruft
2023-04-16
Kaspersky
Perfect Smoke and Mirrors of Enemy: Following Lazarus group by tracking DeathNote Campaign
#DreamJob #DeathNote #Youtube
2023-04-12
Kaspersky
Following the Lazarus group by tracking DeathNote campaign
#DeathNote #DreamJob
2023-04-11
Kaspersky
Perfect Smoke and Mirrors of Enemy: Following Lazarus group by tracking DeathNote campaign
#DeathNote #DreamJob
2023-04-03
Kaspersky
Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack
#SmoothOperator #SupplyChain #3CXDesktopApp #Gopuram
2023-03-24
Kaspersky
APT attacks on industrial organizations in H2 2022
#Trend
2023-03-06
Kaspersky
Understanding the Context of Cyber Threats: Lessons from the Kimsuky Group Attack
#Kimsuky #GoldDragon
2022-12-27
Kaspersky
BlueNoroff introduces new methods bypassing MoTW
#BlueNoroff
2022-11-15
Kaspersky
DTrack activity targeting Europe and Latin America
#DTrack
2022-11-01
Kaspersky
APT trends report Q3 2022
#Trend
2022-08-27
Kaspersky
What if.. We Can See Another Dimension of Cyber Attacks?
#Kimsuky #Slides
2022-08-25
Kaspersky
Kimsuky’s GoldDragon cluster and its C2 operations
#Kimsuky #GoldDragon
2022-08-12
Kaspersky
ATTRIBUTION AND BIAS: MY TERRIBLE MISTAKES IN THREAT INTELLIGENCE ATTRIBUTION
#AppleJeus #ScarCruft #Slides
2022-08-09
Kaspersky
Andariel deploys DTrack and Maui ransomware
#Andariel #DTrack #Maui
2022-07-28
Kaspersky
APT trends report Q2 2022
#Trend
2022-04-27
Kaspersky
APT trends report Q1 2022
#Trend
2022-03-31
Kaspersky
Lazarus Trojanized DeFi app for delivering malware
#DeFi
2022-01-13
Kaspersky
The BlueNoroff cryptocurrency hunt is still on
#Cryptocurrency #BlueNoroff #SnatchCrypto
2021-12-21
Kaspersky
Multi-universe of adversary: Multiple campaigns of Lazarus group and its connect
#Lazarus
2021-12-16
Kaspersky
PseudoManuscrypt: a mass-scale spyware attack campaign
#PseudoManuscrypt
2021-11-29
Kaspersky
ScarCruft surveilling North Korean defectors and human rights activists
#ScarCruft #Chinotto
2021-10-26
Kaspersky
APT trends report Q3 2021
#Trend #Kimsuky #Andariel
2021-10-09
Kaspersky
Multi-universe of adversary: multiple campaigns of the Lazarus group and their connections
#Youtube
2021-10-07
Kaspersky
Multi-universe of adversary: multiple campaigns of the Lazarus group and their connections
#Lazarus
2021-07-26
Kaspersky
APT trends report Q2 2021
#Trend
2021-06-15
Kaspersky
Andariel evolves to target South Korea with ransomware
#Andariel #Ransomware #Manuscrypt
2021-03-09
Kaspersky
Lazarus group's campaigns Target for defense industry
#Defense #ThreatNeedle #Slides #Lazarus
2021-02-25
Kaspersky
Lazarus targets defense industry with ThreatNeedle
#ThreatNeedle #Defense #Lazarus
2021-02-12
Kaspersky
A deep dive into ThreatNeedle cluster of Lazarus group
#ThreatNeedle #Slides #Lazarus
2020-12-23
Kaspersky
Lazarus covets COVID-19-related intelligence
#COVID-19 #Lazarus
2020-10-19
Kaspersky
Deep dive into cybercrime-like APT attack of Lazarus group
#Ransomware #VHD #Slides #Lazarus
2020-09-09
Kaspersky
How North Korean Hackers are Working with European Cybercriminals
#Youtube #TrickBot
2020-09-02
Kaspersky
Operation PowerFall: CVE-2020-0986 and variants
#ScarCruft #PowerFall #CVE-2020-0986
2020-07-28
Kaspersky
Lazarus on the hunt for big game
#Ransomware #VHD #MATA #Lazarus
2020-07-22
Kaspersky
MATA: Multi-platform targeted malware framework
#MATA
2020-02-05
Kaspersky
Dissecting Lazarus's operation target for cryptocurrency business
#ThreatNeedle #AppleJeus #Slides #Lazarus
2020-01-08
Kaspersky
Operation AppleJeus Sequel
#AppleJeus #Cryptocurrency
2019-12-04
Kaspersky
APT review: what the world’s threat actors got up to in 2019
#Trend #Andariel #BlueNoroff #Lazarus
2019-11-01
Kaspersky
Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium
#WizardOpium #CVE-2019-13720
2019-10-28
Kaspersky
Behind the mask of ScarCruft: Unveiling endeavor of shady actor
#Slides #ScarCruft
2019-09-23
Kaspersky
Hello! My name is Dtrack
#DTrack #ATMDtrack
2019-05-14
Kaspersky
ScarCruft continues to evolve, introduces Bluetooth harvester
#Steganography #ScarCruft #CVE-2018-8120
2019-03-26
Kaspersky
Cryptocurrency businesses still being targeted by Lazarus
#Cryptocurrency #Lazarus
2018-09-20
Kaspersky
Lazarus Group’s supply chain attack
#SupplyChain #WaveString
2018-08-23
Kaspersky
Operation AppleJeus: Lazarus hits cryptocurrency exchange with fake installer and macOS malware
#Cryptocurrency #AppleJeus #Lazarus
2018-06-18
Kaspersky
Anatomy of attacks aimed at financial sector by the Lazarus group
#Slides #Manuscrypt
2018-03-08
Kaspersky
OlympicDestroyer is here to trick the industry
#OlympicDestroyer
2018-02-27
Kaspersky
Kimsuky : She is Back with Fairy Tale
#Kimsuky #Slides
2017-12-31
Kaspersky
Never Let Your Infrastructure Go Malicious: Digging Into C&C Infrastructure of Lazarus
#BlueNoroff #Slides #Manuscrypt
2017-08-30
Kaspersky
WALKING IN YOUR ENEMY’S SHADOW: WHEN FOURTH-PARTY COLLECTION BECOMES ATTRIBUTION HELL
#ScarCruft #Daybreak #Erebus
2017-06-08
Kaspersky
Endless gunfire in South Korea
#DESERTWOLF #Youtube #GhostRAT #VANXATM
2017-05-30
Kaspersky
AMBIGUOUS BOUNDARY BETWEEN CYBER CRIME AND CYBER ESPIONAGE : 2016 KOREA APT ATTACK CASE STUDY
#Interpark #DESERTWOLF #GhostRAT #Slides
2017-05-15
Kaspersky
WannaCry and Lazarus Group – the missing link?
#WannaCry #Lazarus
2017-05-12
Kaspersky
WannaCry ransomware used in widespread attacks all over the world
#WannaCry
2017-04-03
Kaspersky
Lazarus Under The Hood
#BlueNoroff #BangSwift
2017-04-03
Kaspersky
Lazarus Under The Hood
#Whitepaper #BlueNoroff #BangSwift
2016-06-17
Kaspersky
Operation Daybreak
#ScarCruft #Daybreak #CVE-2016-1010
2016-02-24
Kaspersky
Operation Blockbuster revealed
#Blockbuster #Lazarus
2014-12-04
Kaspersky
Sony/Destover: mystery North Korean actor’s destructive and past network activity
#Blockbuster #Destover
2013-09-25
Kaspersky
THE ‘ICEFOG’ APT: A TALE OF CLOAK AND THREE DAGGERS
#ICEFOG
2013-09-12
Kaspersky
북한 의심 APT 공격에 대한 Kaspersky 의 분석 정리
#Kimsuky
2013-09-11
Kaspersky
The “Kimsuky” Operation: A North Korean APT?
#Kimsuky
2013-03-20
Kaspersky
South Korean ‘Whois Team’ attacks
#DarkSeoul #WHOisTeam #Wiper