DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Fox-IT / NCC Group blog (2)

Date (as written)IncidentCountryActors
2025-09-01T13:00:00+00:00Three Lazarus RATs coming for your cheese (PondRAT, ThemeForestRAT, RemotePE incident response cases)Lazarus subgroup (AppleJeus, Citrine Sleet, UNC4736, Gleaming Pisces)
2026-05-22T14:55:58+00:00RemotePE: The Lazarus RAT that lives in memoryNorth Korean Lazarus subgroup (AppleJeus, Citrine Sleet, UNC4736, Gleaming Pisces)