lazarusholic
Everyday is lazarus.day
β
Actors
Reports
Incidents
Search
⛾
Kmsec
https://kmsec.uk
Reports
2026-06-10
Kmsec
Hunting North Korea's job adverts on Google Docs
#FamousChollima
2026-05-01
Kmsec
North Korea's abuse of Cloudflare Workers and Pages
#FamousChollima
#NPM
#PylangGhost
2026-03-17
Kmsec
Contagious Trader campaign - Coordinated weaponisation of cryptocurrency trading bots by suspected DPRK malware operators
#ContagiousTrader
#FamousChollima
#NPM
2026-03-13
Kmsec
First instance of PylangGhost RAT observed on npm
#FamousChollima
#PylangGhost
#NPM
2026-02-26
Kmsec
Novel DPRK stager using Pastebin and text steganography
#FamousChollima
#NPM
#Steganography
2026-02-22
Kmsec
Tracking DPRK operator IPs over time
#FamousChollima
#NPM
2026-02-21
Kmsec
DPRK tests Google Drive as a malware stager
#FamousChollima
#NPM
2026-02-16
Kmsec
Exposed DPRK reference malware and logs
#FamousChollima
#NPM
2026-02-13
Kmsec
VMWare artifacts left by a FAMOUS CHOLLIMA operator
#FamousChollima
#NPM
2026-01-19
Kmsec
npm package bigmathix and the BigSquatRat campaign behind it
#BigSquatRat
#Suspicious