lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
#ClickFix
General
2025-01-16 •
Lazarus APT: Techniques for Hunting Contagious Interview
Share:
36
Tagged Reports
28
Unique Authors
560
Active Days
Tagged Reports
2026-07-29
Allsecure
ClickFix, EtherHiding & a DPRK Wallet Trail
#ClickFix
#EtherHiding
#UNC5342
#ContagiousInterview
2026-07-24
Jumpsec
Inside a DPRK BlueNoroff ClickFix Kit
#Bluenoroff
#ClickFix
#NukeSped
#Phishing
#Telegram
#Cloudzy
2026-07-20
SOCRadar
DPRK’s Famous Chollima Deploys RATs Through ClickFake Job Interviews
#FamousChollima
#ClickFix
#PylangGhost
#GolangGhost
2026-06-24
Darktrace
From Click to Command: Behavioral Detection of AppleScript-Led MacOS Intrusions
#macOS
#ClickFix
#SapphireSleet
#T1185
#T1071.001
#T1608.003
#T1059.001
#T1571
#T1588.001
#T1102
#T1213.003
#T1210
#T1041
#T1567.002
2026-04-27
Arctic Wolf
BlueNoroff Uses ClickFix, Fileless PowerShell, and AI-Generated Fake Zoom Meetings to Target Web3 Sector
#Bluenoroff
#ClickFix
#Fileless
2026-04-21
Any Run
New Lazarus APT Campaign: “Mach-O Man” macOS Malware Kit Hits Businesses
#ClickFix
#Lazarus
#macOS
#T1005
#T1543.001
#T1083
#T1497
#T1548.003
#T1555
#T1560
#T1124
#T1222
#T1567
#T1204
#T1552
#T1057
#T1082
2026-04-14
Validin
"Hello? I can’t hear you": Investigating UNC1069’s Fake Meeting Tactics
#CabbageRAT
#ClickFix
#UNC1069
2026-04-13
Bitso
North Korea's Safari: Hunting for RATs
#ClickFix
#FamousChollima
2026-04-01
Break Glass Intelligence
Two IOCs In, Five C2 Servers Out: Mapping DPRK's Contagious Interview Campaign From InvisibleFerret to a Kimsuky Crossover
#ClickFix
#ContagiousInterview
#InvisibleFerret
#Kimsuky
2026-03-25
e Sentire
EtherRAT & SYS_INFO Module: C2 on Ethereum (EtherHiding), Target Selection, CDN-Like Beacons
#ClickFix
#EtherHiding
#EtherRAT
2026-03-23
Sophos
NICKEL ALLEY strategy: Fake it ‘til you make it
#NickelAlley
#ClickFix
#ContagiousInterview
#PylangGhost
2026-03-05
Bitso
North Korea's Safari: Poaching for Gophers
#FamousChollima
#ClickFix
2026-03-02
Moonlock
Fake VCs target crypto talent
#ClickFix
#UNC1069
2026-02-20
Poly Swarm
UNC1069 Uses New Tools to Target Crypto Entities
#ClickFix
#UNC1069
2026-02-10
Google
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering
#UNC1069
#ClickFix
#Cryptocurrency
#WAVESHAPER
1
2
3
»
« Back