Lazarus Group
Labyrinth ChollimaHIDDEN COBRAGuardians of PeaceZINCNICKEL ACADEMYDiamond Sleet
North KoreaReconnaissance General Bureau (RGB)
Lazarus Group is a North Korean state-sponsored cyber threat group attributed to the Reconnaissance General Bureau (RGB). Lazarus Group has been active since at least 2009 and is reportedly responsible for the November 2014 destructive wiper attack on Sony Pictures Entertainment, identified by Novetta as part of Operation Blockbuster.
MITRE ATT&CK Techniques
T1001.003T1005T1008T1010T1012T1016T1021.001T1021.002T1021.004T1027.007T1027.009T1027.013T1033T1036.003T1036.004T1036.005T1041T1046T1047T1048.003T1049T1053.005T1055.001T1056.001T1057T1059.001T1059.003T1059.005T1070T1070.003T1070.004T1070.006T1071.001T1074.001T1078T1082T1083T1090.001T1090.002T1098T1102.002T1104T1105T1106T1110.003T1124T1132.001T1134.002T1140T1189T1202T1203T1204.002T1218T1218.005T1218.011T1485T1489T1491.001T1529T1542.003T1543.003T1547.001T1547.009T1553.002T1557.001T1560T1560.002T1560.003T1561.001T1561.002T1564.001T1566.001T1566.002T1566.003T1571T1573.001T1574.001T1574.013T1583.001T1583.006T1584.004T1585.001T1585.002T1587.001T1588.002T1588.004T1589.002T1591T1620T1680T1685T1686.003
Associated Malware
AppleJeusAuditCredBADCALLBLINDINGCANBankshotCryptoisticDaclsDtrackECCENTRICBANDWAGONFALLCHILLHARDRAINHOPLIGHTHotCroissantKEYMARBLEMagicRATProxysvcRATANKBARawDiskResponderTAINTEDSCRIBETYPEFRAMEThreatNeedleVolgmerWannaCrynetshroute
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.