lazarusholic

Everyday is lazarus.dayβ

CitrineSleet

Citrine Sleet being the first activity group Microsoft observed capitalizing on a prior supply chain compromise to conduct the 3CX supply chain attack in March 2023

2023-10-06, Microsoft
Microsoft Digital Defense Report 2023 (MDDR)

Also known as

 
Name Named by AKA First seen Last seen
APT-C-26 Qihoo360 Lazarus 2018-08-15 2025-02-11
APT-Q-1 Qianxin Lazarus 2023-03-14 2025-02-21
Appleworm Symantec Lazarus 2017-04-01 2021-02-18
BlackArtemis PWC Lazarus 2020-03-03 2023-04-12
Bureau121 - Lazarus - 2020-11-23
CitrineSleet Microsoft Lazarus 2023-10-06 2025-03-27
DEV-0139 Microsoft Lazarus 2022-12-06 2022-12-06
G0032 MITRE Lazarus 2017-05-31 2017-05-31
GleamingPisces PaloaltoNetworks CitrineSleet 2024-09-09 2024-09-18
GodsApostles SelfGiven Lazarus 2014-11-24 -
GodsDisciples SelfGiven Lazarus 2014-11-24 -
Greedyman KRCERT Lazarus 2020-02-29 -
Group77 CiscoTalos Lazarus 2016-02-24 2019-09-13
GuardiansofPeace SelfGiven Lazarus 2014-11-24 2014-12-05
Hastati SecureWorks Lazarus - 2013-03-21
HiddenCobra USCISA Lazarus 2017-06-13 2020-06-23
ITG03 IBM Lazarus - -
LabyrinthChollima CrowdStrike Lazarus 2018-02-26 2025-02-27
Lazarus Novetta - 2016-02-24 2025-04-24
NickelAcademy SecureWorks Lazarus - 2024-10-08
Office91 - Lazarus - 2019-09-13
REF7001 Elastic Lazarus 2023-11-01 2024-10-03
REF9134 Elastic Lazarus 2023-06-21 2023-06-21
RGB-D3 IssuemakersLab Lazarus 2020-05-20 2020-09-08
SectorA01 NSHC Lazarus 2019-01-23 2025-04-16
SelectivePisces PaloaltoNetworks Lazarus 2022-09-26 2024-09-09
TA404 Proofpoint Lazarus 2022-07-14 2022-07-14
UNC1720 Mandiant Lazarus 2023-10-10 2023-10-10
UNC4736 Mandiant CitrineSleet 2023-04-11 2025-04-24
UTA0040 Volexity UNC4736 2023-03-30 2023-03-30
Unit121 - Lazarus - 2020-11-23
VoidImugi TrendMicro Lazarus 2024-06-10 2025-03-18
WASSONITE Dragos Lazarus 2020-05-30 2023-02-14
WHOisTeam Mcafee Lazarus 2013-03-20 2014-12-23
Zinc Microsoft Lazarus 2017-12-19 2022-11-22

Reports

2025-03-27
pcaversaccio
1inch-analysis.app — A DPRK Trojan Horse
#CitrineSleet
2024-11-08
ESET
ESET APT Activity Report Q2 2024–Q3 2024
#CitrineSleet #Kimsuky #Lazarus #ScarCruft #Trend
2024-10-15
Microsoft
Microsoft Digital Defense Report 2024
#CitrineSleet #JadeSleet #MoonstoneSleet #SapphireSleet #Trend
2024-09-11
Microsoft
Citrine and Onyx Sleet: An Inside Look at North Korean Threat Actors
#CitrineSleet #OnyxSleet #Podcast
2024-09-02
Contagio
2022-2024 North Korea Citrine Sleet /Lazarus FUDMODULE ( BYOVD ) Rootkit Samples
#CitrineSleet #FudModule
2024-08-31
Microsoft
North Korean threat actor Citrine Sleet exploiting Chromium zero-day
#CVE-2024-7971 #CitrineSleet
2023-10-26
Microsoft
State-Sponsored Financially Motivated Attacks
#CitrineSleet #Cryptocurrency #Slides #3CXDesktopApp
2023-10-06
Microsoft
Microsoft Digital Defense Report 2023 (MDDR)
#Trend #Sleet #JadeSleet #OnyxSleet #DiamondSleet #EmeraldSleet #OpalSleet #RubySleet #SapphireSleet #CitrineSleet
2022-12-06
Microsoft
DEV-0139 launches targeted attacks against the cryptocurrency industry
#Cryptocurrency #DEV-0139 #AppleJeus #Wolfic #CitrineSleet