Hunt.io blog
Inside DPRK Operations: New Lazarus and Kimsuky Infrastructure Uncovered Across Global Campaigns (with Acronis TRU) · 2025-12-17T00:00:00.000Z
Note: This report is the result of a collaborative investigation between Hunt.io and the Acronis Threat Research Unit , where both teams collaborated to map ongoing DPRK infrastructure activity, including Lazarus and Kimsuky. ... Throughout the analysis, we surfaced clusters of operational assets that had not been connected publicly before, revealing active tool-staging servers, credential theft environments, FRP tunneling nodes, and certificate-linked infrastructure fabric controlled by DPRK operators.