lazarusholic

Everyday is lazarus.dayβ

#Ransomware

Technique

Reports

2026-06-02
Ahnlab
새벽에 온 암호화 손님 Endpoint(Midnight) 랜섬웨어 분석
#Endpoint #Midnight #Ransomware #Suspicious
2026-03-17
BreakGlassIntelligence
When Nation-States Become Ransomware Affiliates: Lazarus Group Deploys Medusa via a Custom IME-Based Loader
#Lazarus #Medusa #Ransomware
2026-03-12
BreakGlassIntelligence
Lazarus Group Caught Running Medusa Ransomware: XOR-Decoded Config Exposes Tor C2, IME-Based Loader, and a 7-Month Intrusion Timeline
#Lazarus #Medusa #Ransomware
2025-11-24
Bitdefender
The Korean Leaks – Analyzing the Hybrid Geopolitical Campaign Targeting South Korean Financial Services With Qilin RaaS
#MoonstoneSleet #Ransomware
2025-08-07
S2W
ScarCruft’s New Language: Whispering in PubNub, Crafting Backdoor in Rust, Striking with Ransomware
#ChinopuNK #DogpuNK #LNK #Ransomware #ScarCruft #puNK-006 #VCD
2025-04-23
PaloaltoNetworks
Extortion and Ransomware Trends January-March 2025
#JumpyPisces #Ransomware #Trend
2025-04-23
VirtualRoutes
Ransomware’s New Masters: How States Are Hijacking Cybercrime
#Andariel #Ransomware
2025-03-06
Microsoft
Moonstone Sleet deploying Qilin ransomware at a limited number of orgs
#MoonstoneSleet #Qilin #Ransomware
2025-01-02
Ahnlab
AhnLab EDR을 활용한 Play 랜섬웨어 공격 사례 탐지
#Andariel #Play #Ransomware
2025-01-01
Ahnlab
Play Ransomware Attack Cases Detected by AhnLab EDR
#Andariel #Play #Ransomware
2023-12-19
PicusSecurity
Play Ransomware Analysis, Simulation and Mitigation- CISA Alert AA23-352A
#Play #Ransomware
2023-12-05
KRNPA
北 해킹조직‘안다리엘’평양發 해킹공격으로 방산기술 탈취, 북한으로 랜섬웨어 수익금 송금
#Ransomware #Andariel #News
2023-11-20
KRSPO
해킹 피해자 730명으로부터 26억 원 갈취한 데이터복구 업체 운영자 등 구속기소
#Ransomware #News #Magniber
2023-10-27
Chosun
랜섬웨어로 34억 뜯어낸 IT회사, 北해커와 한패였다
#Ransomware #News
2023-10-11
Ahnlab
Distribution of Magniber Ransomware Stops (Since August 25th)
#Ransomware #Magniber
2023-03-16
Ahnlab
Threat Trend Report on Region-Specific Ransomware
#Ransomware #Magniber #Gwisin
2023-02-23
Ahnlab
Magniber Ransomware’s Relaunch Technique
#Ransomware #Magniber
2023-02-10
KRNCSC
랜섬웨어 공격을 통한 북한의 금전 탈취 수법
#Ransomware #Maui #H0lyGh0st
2023-02-10
Ahnlab
북한 랜섬웨어 한미 합동 사이버보안 권고 관련 안랩 대응 현황
#Ransomware #Maui #H0lyGh0st
2023-02-09
USCISA
Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities
#Ransomware #Maui #H0lyGh0st
2023-01-26
Ahnlab
Localization of Ransomware, New Change or Temporary Phenomenon?
#Ransomware #Gwisin
2022-11-01
Ahnlab
Gwisin 랜섬웨어 공격자의 침투 및 배포 방법
#Ransomware #Gwisin
2022-10-25
Ahnlab
Rapidly Evolving Magniber Ransomware
#Ransomware #Magniber
2022-09-22
Trellix
The Sound of Malware
#Ransomware #VHD
2022-08-30
Avertium
NORTH KOREA IS THE THREAT
#Ransomware #H0lyGh0st
2022-08-24
Cyberone
한국 기업을 타깃으로 하는 귀신 랜섬웨어 (리눅스 ver)
#Ransomware #Gwisin
2022-08-24
SKShildus
귀신(Gwisin) 랜섬웨어 공격 전략 분석 리포트
#Ransomware #Gwisin
2022-08-17
KRCERT
TTPs #8 : Operation GWISIN - 맞춤형 랜섬웨어 공격 전략 분석
#Ransomware #Gwisin
2022-08-05
Somansa
H0lyGh0st 랜섬웨어
#Ransomware #H0lyGh0st #Andariel
2022-08-03
Ahnlab
Gwisin Ransomware Targeting Korean Companies
#Ransomware #Gwisin
2022-07-27
Ahnlab
국내 기업 대상의 귀신(Gwisin) 랜섬웨어
#Ransomware #Gwisin
2022-07-27
Avertium
Healthcare Ransomware Threats - MedusaLocker & Maui
#Ransomware #Maui
2022-07-14
Microsoft
North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware
#Ransomware #DEV-0530 #H0lyGh0st #OnyxSleet #Plutonium
2022-07-06
USCISA
North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector
#Ransomware #Maui
2022-07-06
Stairwell
Maui ransomware
#Ransomware #Maui
2022-05-03
Trellix
The Hermit Kingdom’s Ransomware play
#Ransomware #APT38 #MATA #VHD
2021-06-15
Kaspersky
Andariel evolves to target South Korea with ransomware
#Andariel #Ransomware #Manuscrypt
2020-10-19
Kaspersky
Deep dive into cybercrime-like APT attack of Lazarus group
#Ransomware #VHD #Slides #Lazarus
2020-07-28
Kaspersky
Lazarus on the hunt for big game
#Ransomware #VHD #MATA #Lazarus
2018-07-15
Malwarebytes
Magniber ransomware improves, expands within Asia
#Ransomware #Magniber
2017-10-19
Mandiant
Magniber Ransomware Wants to Infect Only the Right People
#Ransomware #Magniber
2017-10-17
Malwarebytes
Magniber ransomware: exclusively for South Koreans
#Ransomware #Magniber