DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Lazarus attack group (6)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
since around 2019Lazarus attacks via LinkedIn against organizations in JapanJapanLazarus attack group
ongoing since 2019Operation Dangerous Password targeting crypto currency exchangersJapanLazarus attack group (operation identified in Japan and associated with Lazarus)
(published January 20, 2021)Lazarus use of common tools (AdFind, SMBMap, Responder-Windows, WinRAR, VNC, ProcDump) after intrusionLazarus attack group, a.k.a. Hidden Cobra
(not dated)Operation Dream Job (defense industry; attacks confirmed in Japan)JapanLazarus attack group (operation identified in Japan and associated with Lazarus)
(not dated)Operation Dangerous Password: hijacked LinkedIn account of an employee of a Japanese crypto currency exchangerJapanLazarus attack group (operation identified in Japan and associated with Lazarus)
(not dated)Operation AppleJeus targeting crypto currency users via LinkedIn and TelegramLazarus attack group (operation identified in Japan and associated with Lazarus)