Lazarus group


Related: cybercrime | CyberSecurity | 202503211621 - Ransomware


The Lazarus Group is a highly sophisticated hacker collective widely believed to be operated by the North Korean government.

Active since at least 2009, this group has been responsible for numerous high-profile cyberattacks, including the 2014 Sony Pictures hack, the 2016 Bangladesh Bank heist, and the 2017 WannaCry ransomware attack.

This groups attacks originate from The Shadow Brokers leaks garnered by the NSA
Downstream, this affects the 2024 CDK Ransomware attack

Their activities typically involve disruption, financial theft, espionage, and misdirection, targeting a wide range of entities from financial institutions and government agencies to pharmaceutical companies and cybersecurity researchers.

Employing advanced techniques such as spear-phishing, malware deployment, and zero-day vulnerabilities, the Lazarus Group has established itself as one of the most notorious and impactful cybercrime organizations in history, significantly influencing global cybersecurity landscapes and prompting international concern.