Group-IB listed City Union Bank in India among Lazarus-attributed SWIFT theft cases and reported a $1.87 million loss in the same financial-sector campaign set that included Banco de Chile, Cosmos Bank, Bank of Valletta, and Punjab National Bank. The evidence ties the incident to North Korea-linked operators using SWIFT access and prepared cash-out schemes against banks rather than a generic fraud case.