lazarusholic

Everyday is lazarus.dayβ

Symantec

@threatintel, https://symantec.com

Actors

Name Named by AKA First seen Last seen
Appleworm Symantec Lazarus 2017-04-01 2021-02-18
Clasiopa Symantec Andariel 2023-02-23 2023-02-23
Springtail Symantec Kimsuky 2024-03-20 2025-04-07
Stonefly Symantec Andariel 2022-04-27 2024-10-02
Vedalia Symantec Konni 2024-04-07 2024-10-04

Reports

2025-04-07
Symantec
Springtail APT group targets South Korean government entities
#Springtail #LNK
2024-10-04
Symantec
VeilShell: A new threat from North Korea's Vedalia APT group
#Vedalia #VeilShell
2024-10-02
Symantec
Stonefly: Extortion Attacks Continue Against U.S. Targets
#Preft #Stonefly
2024-05-16
Symantec
Springtail: New Linux Backdoor Added to Toolkit
#Gomir #Springtail #TrollStealer #GoBear
2024-04-07
Symantec
Vedalia APT group exploits oversized LNK files in malware campaign
#Vedalia #LNK
2024-03-21
Symantec
Springtail APT group abuses valid certificate of known Korean public entity
#Springtail
2024-03-20
Symantec
New DEEP#GOSU campaign attributed to Springtail APT (aka Kimsuky)
#Springtail
2023-04-21
Symantec
X_Trader Supply Chain Attack Affects Critical Infrastructure Organizations in U.S. and Europe
#SupplyChain #3CXDesktopApp #SmoothOperator #X_Trader
2023-03-30
Symantec
3CX: Supply Chain Attack Affects Thousands of Users Worldwide
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-02-23
Symantec
Clasiopa: New Group Targets Materials Research
#Atharvan #Clasiopa
2022-04-27
Symantec
Stonefly: North Korea-linked Spying Operation Continues to Hit High-value Targets
#Stonefly
2022-04-14
Symantec
Lazarus Targets Chemical Sector
#DreamJob #MagicLine4NX
2021-02-18
Symantec
Lazarus: Three North Koreans Charged for Financially Motivated Attacks
#Appleworm
2018-11-08
Symantec
FASTCash: How the Lazarus Group is Emptying Millions from ATMs
#FASTCash
2017-05-25
Symantec
Lazarus: History of mysterious group behind infamous cyber attacks
2017-05-22
Symantec
WannaCry: Ransomware attacks show strong links to Lazarus group
#WannaCry
2017-04-01
Symantec
Internet Security Threat Report vol. 22
#Appleworm
2017-02-12
Symantec
Attackers target dozens of global banks with new malware
#Wateringhole #BROU #CNBV #KNF
2016-05-26
Symantec
SWIFT attackers’ malware linked to more financial attacks
#BangSwift
2015-10-26
Symantec
Duuzer back door Trojan targets South Korea to take over computers
#Duuzer
2014-12-04
Symantec
Destover: Destructive malware has links to attacks on South Korea
#Destover
2013-06-26
Symantec
Four Years of DarkSeoul Cyberattacks Against South Korea Continue on Anniversary of Korean War
#6.25CyberTerror
2013-05-28
Symantec
South Korean Financial Companies Targeted by Castov
#Castov
2013-03-29
Symantec
Are the 2011 and 2013 South Korean Cyberattacks Related?
#DarkSeoul
2013-03-20
Symantec
South Korean Banks and Broadcasting Organizations Suffer Major Damage from Cyberattack
#DarkSeoul
2011-03-11
Symantec
Trojan.Koredos Comes with an Unwelcomed Surprise
#3.4DDoS #Koredos #DDoS #Finance #Government
2009-07-09
Symantec
Born on the 4th of July
#7.7DDoS #Dozer #MYDOOM #DDoS #Finance #Government