ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Lazarus Group
1 incidentes
1 paises
1 sectores
apt KP Ultimo: 2026-05-25
Aliases: APT 38, APT-C-26, APT38, ATK117, ATK3, Andariel, Appleworm, BeagleBoyz, Black Artemis, Bluenoroff, Bureau 121, COPERNICIUM, COVELLITE, Citrine Sleet, DEV-0139, DEV-1222, Dark Seoul, Diamond Sleet
Lazarus Group is a state-sponsored threat actor primarily attributed to North Korea's Reconnaissance General Bureau. Emerging around 2009 with initial DDoS attacks during "Operation Troy", the group has evolved significantly, broadening its operational scope to include sophisticated financial cybercrime, extensive cyber espionage, and destructive cyber operations. Their primary motivation is to generate revenue for the DPRK regime, evade international sanctions, and further national strategic objectives, alongside intelligence gathering and disruption. What sets Lazarus Group apart is its dual mandate, effectively blending intelligence-style intrusions with large-scale financially motivated attacks, a combination uncommon among most state-backed actors. The group is known for major financial heists, intellectual property theft, and highly destructive malware campaigns. It operates under numerous aliases, including APT38, Hidden Cobra, Labyrinth Chollima, Guardians of Peace, ZINC, Bluen
Aliases del actor
APT 38APT-C-26APT38ATK117ATK3AndarielApplewormBeagleBoyzBlack ArtemisBluenoroffBureau 121COPERNICIUMCOVELLITECitrine SleetDEV-0139DEV-1222Dark SeoulDiamond SleetG0032G0082Genie SpiderGroup 77Hastati GroupHidden CobraLabyrinth ChollimaLazarusMoonstone SleetNICKEL GLADSTONENewRomanic Cyber Army TeamNickel AcademyOperation AppleJeusOperation DarkSeoul