DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Lazarus Group

Date (as written)
Feb 2016
Year
2016
Country
South Korea, Sony Pictures Entertainment , United States, Bangladesh Bank, Defense companies in Israel and the Middle East, Global banks, U.S. defense contractors
Actors (as written)
Dark Seoul; malware analysis report; on a tool called Typeframe used by the Lazarus Group.; In September 2018, the U.S. Department of Justice; criminally charged and sanctioned; Park Jin-hyok and Chosun Expo Joint Venture, alleged members of this threat actor.
Actor pages
Dark Seoulmalware analysis reporton a tool called Typeframe used by the Lazarus Group.In September 2018the U.S. Department of Justicecriminally charged and sanctionedPark Jin-hyok and Chosun Expo Joint Venturealleged members of this threat actor.
Tags (as written)
Espionage; Government Private sector

Source entries (1)

CFR Cyber Operations Tracker

Lazarus Group · Feb 2016
This threat actor targets and compromises entities primarily in South Korea and South Korean interests for espionage, disruption, and destruction. It has also been known to conduct cyber operations for financial gain, including targeting cryptocurrency exchanges. In 2018, the U.S. Department of Homeland Security issued a
https://www.cfr.org/cyber-operations/lazarus-group
https://www.operationblockbuster.com/wp-content/uploads/2016/02/Operation-Blockbuster-Report.pdf
https://securelist.com/blog/sas/77908/lazarus-under-the-hood/
https://www.us-cert.gov/ncas/alerts/TA17-164A
https://www.mandiant.com/resources/mapping-dprk-groups-to-government

Suggest a correction on GitHub