REF9403 | lazarus.day

REF9403

2026-07-18 • Elastic • New North Korean campaign uses fake coding interv…

27

Related Actors
1

Related Reports

Related Actors

Storm-1877

Microsoft

Contagious Interview

First seen: Apr 2023

Last seen: May 2024

Famous Chollima

Crowd Strike

First seen: Aug 2024

Last seen: Jul 2026

UNC5267

Mandiant

Famous Chollima

First seen: Sep 2024

Last seen: Mar 2026

Nickel Tapestry

Secure Works

Famous Chollima

First seen: Oct 2024

Last seen: May 2025

Tenacious Pungsan

Datadog

Contagious Interview

First seen: Oct 2024

Last seen: Oct 2024

Purple Bravo

Recorded Future

Contagious Interview

First seen: Feb 2025

Last seen: Jan 2026

TAG-120

Recorded Future

Purple Bravo

First seen: Feb 2025

Last seen: Feb 2025

TAG-121

Recorded Future

Contagious Interview

First seen: Feb 2025

Last seen: Feb 2025

Void Dokkaebi

Trend Micro

Contagious Interview

First seen: Apr 2025

Last seen: Jun 2026

UNC5342

Mandiant

Contagious Interview

First seen: Apr 2025

Last seen: Oct 2025

Water Plum

NTTSecurity

Contagious Interview

First seen: May 2025

Last seen: Mar 2026

Gwisin Gang

Dtex Systems

Contagious Interview

First seen: May 2025

Last seen: May 2025

Elusive Comet

Security Alliance

Famous Chollima

First seen: Mar 2025

Last seen: Apr 2025

Jasper Sleet

Microsoft

Famous Chollima

First seen: Jun 2025

Last seen: Apr 2026

Storm-0287

Microsoft

Jasper Sleet

First seen: Apr 2023

Last seen: Jun 2025

Contagious Interview

Paloalto Networks

Famous Chollima

First seen: Nov 2023

Last seen: Jul 2026

G1052

MITRE

Contagious Interview

First seen: Oct 2025

Last seen: Oct 2025

Coral Sleet

Microsoft

Storm-1877

First seen: Mar 2026

Last seen: Mar 2026

Nickel Alley

Secure Works

Purple Bravo

First seen: Mar 2026

Last seen: Mar 2026

Polin Rider

Open Source Malware

Contagious Interview

First seen: Mar 2026

Last seen: Jul 2026

Hexagonal Rodent

Expel

Contagious Interview

First seen: Apr 2026

Last seen: Apr 2026

UNK_Dead Drop

Proofpoint

Contagious Interview

First seen: Jun 2026

Last seen: Jun 2026

Deceptive Development

ESET

Contagious Interview

First seen: Feb 2025

Last seen: May 2026

DEV#POPPER

Securonix

Contagious Interview

First seen: Apr 2024

Last seen: Apr 2026

Wagemole

Paloalto Networks

Famous Chollima

First seen: Nov 2023

Last seen: Mar 2026

CL-STA-0240

Paloalto Networks

Contagious Interview

First seen: Nov 2023

Last seen: Oct 2024

Success Key

Checkmarx

Polin Rider

First seen: Jun 2026

Last seen: Jul 2026

Related Reports

Top Authors

View all reports in this cluster

2026-07-18

Elastic

New North Korean campaign uses fake coding interviews to steal developer credentials

#BeaverTail #OtterCookie #REF9403

View all reports in this cluster