Trend Micro Research (11)
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| 01.06.2018 | Andariel Group attacks website of South Korean non-profit organisation | Korea, Republic of;Korea, Republic of | Andariel/APT45/Onyx Sleet fka PLUTONIUM/Silent Chollima/Stonefly/G0138/DarkSeoul < Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110);Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110) |
| 2018-11-20 | Lazarus Targets Latin American Financial Companies | ||
| 2018-01-24 | Lazarus Campaign Uses Remote Tools, RATANKBA, and More | ||
| 2019-11-20 | Mac Backdoor Linked to Lazarus Targets Korean Users | ||
| 2020-05-11 | Lazarus’ MacOS Dacls RAT Shows Multi-Platform Ability | ||
| 2021-06-22 | NukeSped Copies Fileless Code From Bundlore, Leaves It Unused | ||
| 2025-04-23 | Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations | ||
| 2026-04-21 | Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories | ||
| 2026-05-22 | Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware | ||
| Alleged North Korean Campaign HIDDEN COBRA Targets Critical Industries | |||
| A Look into the Lazarus Group’s Operations |