| 2019-12-11T17:00:24.000Z | 5 Things to Know About SentinelLabs’ Finding Link Between Crimeware and APT Lazarus | SentinelOne | | |
| early this year (report dated 2020-08-19) | Job-posting lure campaign against government/defense contractors (BLINDINGCAN) | | HIDDEN COBRA; "A threat group with a nexus to North Korea" |
| 2020-07-27T16:59:33.000Z | Four Distinct Families of Lazarus Malware Target Apple’s macOS Platform | SentinelOne | | |
| 2023-03 | 3CX | United States | UNC4736 |
| 2022-08 | Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 2023-10 | Elastic catches DPRK passing out KANDYKORN | | Lazarus Group, Hidden Cobra, Labyrinth Chollima |
| 2023-03-30T11:37:54+00:00 (published_time) | 3CX Desktop App supply chain compromise (ICONIC) | | UTA0040, later attributed to Lazarus |
| 2023-07-05T13:59:43.000Z | BlueNoroff | How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection | SentinelOne | | |
| 2024-09-03T13:00:30.000Z | PinnacleOne ExecBrief | North Korean IT Worker Threat | SentinelOne | | |
| 2025-02-03T20:13:32.000Z | macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed | SentinelOne | | |