lazarusholic

Everyday is lazarus.dayβ

APT PROFILE – LAZARUS GROUP

2025-08-13, Cyfirma
https://www.cyfirma.com/research/apt-profile-lazarus-group/
#Lazarus

Contents

The Lazarus Group is a highly sophisticated, state-sponsored cyber threat group attributed to the North Korean government. They are also known by many other names, including Hidden Cobra, APT38, and Guardians of Peace. Active since at least 2009, this group is one of the most prolific and dangerous advanced persistent threat (APT) actors in the world. Their attacks are not only for cyber espionage but also for financially motivated cybercrime, which sets them apart from most other state-backed actors.
Alias:
Onyx Sleet, APT 38, APT-38, APT38, Alluring Pisces, Andariel, AppleJeus, Appleworm, Bluenoroff, Bureau 121, CL-STA-240, CageyChameleon, Chollima, Citrine Sleet, Covellite, CryptoCore, Dark Seoul, Diamond Sleet, Group 77, Group77, Guardians of Peace, Hastati Group, Hidden Cobra, Jade Sleet, Jumpy Pisces, Labyrinth Chollima, Lazarus, Moonstone Sleet, NICKEL ACADEMY, NewRomanic Cyber Army Team, Operation DarkSeoul, Operation GhostSecret, Operation Troy, PUKCHONG, REF9135, Sapphire Sleet, Silent Chollima, Slow Pisces, Stardust, Stonefly group, TA444, TraderTraitor, UNC4899, Unit 121, …