Operation “Marstech Mayhem”

Date (as written): 2025-01
Year: 2025
Actors (as written): Lazarus Group, Hidden Cobra, Labyrinth Chollima
Actor pages: Lazarus Group Hidden Cobra Labyrinth Chollima

Source entries (2)

ThaiCERT Threat Group Cards

Operation “Marstech Mayhem” · 2025-01

Operation “Marstech Mayhem” Lazarus Group’s Open-Source Trap: North Korea’s New Malware Tactic Targeting Developers and Crypto Wallets https://securityscorecard.com/wp-content/uploads/2025/02/Operation-Marstech-Mayhem-Report_021025_03.pdf

https://securityscorecard.com/wp-content/uploads/2025/02/Operation-Marstech-Mayhem-Report_021025_03.pdf

Hackmageddon cyber attacks timelines (Paolo Passeri)

Crypto Developers · 10/02/2025

Researchers at SecurityScorecard reveal the details of operation Marstech Mayhem, carried out by the North Korean threat actor Lazarus Group via a previously undocumented JavaScript implant named Marstech1 as part of limited targeted attacks against developers. [Date Occurred: Between November 2024 and January 2025; Date Discovered: Between November 2024 and January 2025]

https://www.hackmageddon.com/2025/07/23/1-15-february-2025-cyber-attacks-timeline/

https://thehackernews.com/2025/02/lazarus-group-deploys-marstech1.html

Suggest a correction on GitHub