lazarusholic

Everyday is lazarus.dayβ

USCISA

https://cisa.gov

Actors

Name Named by AKA First seen Last seen
BeagleBoyz USCISA BlueNoroff 2020-08-26 2021-03-04
HiddenCobra USCISA Lazarus 2017-06-13 2020-06-23
TraderTraitor USCISA BlueNoroff 2022-04-18 2025-04-22

Reports

2024-07-25
USCISA
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
#YARA #Andariel
2023-04-20
USCISA
MAR-10435108-1.v1 ICONICSTEALER
#SupplyChain #3CXDesktopApp #SmoothOperator #ICONICSTEALER
2023-02-09
USCISA
Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities
#Ransomware #Maui #H0lyGh0st
2022-07-06
USCISA
North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector
#Ransomware #Maui
2022-04-18
USCISA
TraderTraitor: North Korean State-Sponsored APT Targets Blockchain Companies
#Cryptocurrency #TraderTraitor
2021-02-17
USCISA
AppleJeus: Analysis of North Korea’s Cryptocurrency Malware
#Cryptocurrency #AppleJeus
2020-10-27
USCISA
North Korean Advanced Persistent Threat Focus: Kimsuky
#Kimsuky
2020-08-26
USCISA
FASTCash 2.0: North Korea's BeagleBoyz Robbing Banks
#BeagleBoyz #FASTCash2
2020-08-19
USCISA
North Korean Remote Access Trojan: BLINDINGCAN
#BLINDINGCAN
2020-08-14
USCISA
Phishing Emails Used to Deploy KONNI Malware
#Phishing #Konni
2020-05-12
USCISA
North Korean Malicious Cyber Activity
2020-04-15
USCISA
Guidance on the North Korean Cyber Threat
2020-02-14
USCISA
MAR-10271944-3.v1 – North Korean Trojan: BUFFETLINE
#BUFFETLINE
2020-02-14
USCISA
MAR-10265965-1.v1 – North Korean Trojan: BISTROMATH
#BISTROMATH
2020-02-14
USCISA
MAR-10265965-2.v1 – North Korean Trojan: SLICKSHOES
#SLICKSHOES
2020-02-14
USCISA
MAR-10265965-3.v1 – North Korean Trojan: CROWDEDFLOUNDER
#CROWDEDFLOUNDER
2020-02-14
USCISA
MAR-10271944-1.v1 – North Korean Trojan: HOTCROISSANT
#HOTCROISSANT
2020-02-14
USCISA
MAR-10271944-2.v1 – North Korean Trojan: ARTFULPIE
#ARTFULPIE
2020-02-14
USCISA
MAR-10135536-8.v3 – North Korean Trojan: HOPLIGHT
#Hoplight
2019-10-31
USCISA
MAR-10135536-8 – North Korean Trojan: HOPLIGHT
#Hoplight
2019-09-09
USCISA
North Korean Trojan: BADCALL
#Badcall
2019-09-09
USCISA
North Korean Proxy Malware: ELECTRICFISH
#Electricfish
2019-09-08
USCISA
U.S. Cyber Command Shares 11 New Malware Samples
2019-05-09
USCISA
North Korean Tunneling Tool: ELECTRICFISH
#Electricfish
2019-04-10
USCISA
MAR-10135536-8 – North Korean Trojan: HOPLIGHT
#Hoplight
2018-10-02
USCISA
HIDDEN COBRA – FASTCash Campaign
#FASTCash #HiddenCobra
2018-08-09
USCISA
MAR-10135536-17 – North Korean Trojan: KEYMARBLE
#HiddenCobra #KEYMARBLE
2018-06-14
USCISA
MAR-10135536-12 – North Korean Trojan: TYPEFRAME
#HiddenCobra #TYPEFRAME
2018-05-29
USCISA
HIDDEN COBRA – Joanap Backdoor Trojan and Brambul Server Message Block Worm
#HiddenCobra #Joanap #Brambul
2018-03-28
USCISA
North Korean Trojan: SHARPKNOT
#HiddenCobra #SHARPKNOT
2018-02-13
USCISA
North Korean Trojan: BADCALL
#HiddenCobra #Badcall
2018-02-13
USCISA
North Korean Trojan: HARDRAIN
#HiddenCobra #HARDRAIN
2017-12-21
USCISA
North Korean Trojan: BANKSHOT
#HiddenCobra #Bankshot #YARA
2017-12-21
USCISA
North Korean Malicious Cyber Activity
#HiddenCobra
2017-11-14
USCISA
HIDDEN COBRA – North Korean Trojan: Volgmer
#HiddenCobra #Volgmer #YARA
2017-11-14
USCISA
HIDDEN COBRA – North Korean Remote Administration Tool: FALLCHILL
#HiddenCobra #FALLCHILL #YARA
2017-08-23
USCISA
Analysis of Delta Charlie Attack Malware
#DeltaCharlie
2017-06-13
USCISA
HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
#HiddenCobra
2014-12-19
USCISA
Targeted Destructive Malware
#Wiper