Cisco Talos blog (8)

Date (as written)	Incident	Country	Actors
2021-11-10T22:11:00.000Z	North Korean attackers use malicious blogs to deliver malware to high-profile South Korean targets
2022-09-07T12:01:00.000Z	MagicRAT: Lazarus’ latest gateway into victim networks
01.02.2022	Between February and July 2022, the North Korean group Lazarus targeted organizations, including energy service providers worldwide	Global (region);Canada;United States;Japan	Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
2023-12-11T13:50:59.000Z	Operation Blacksmith: Lazarus targets organizations worldwide using novel Telegram-based malware written in DLang
2023-08-24T12:04:22.000Z	Lazarus Group's infrastructure reuse leads to discovery of new malware
21/08/2024	Undisclosed organization(s)	Unknown	UAT-5394 linked to Kimsuky
2025-10-16T10:00:49.000Z	BeaverTail and OtterCookie evolve with a new Javascript module
2026-04-02T10:00:49.000Z	Inside the Talos 2025 Year in Review: A discussion on what the data means for defenders