Lazarus and DeceptiveDevelopment target drones and software supply chains
ESET says April–September 2026 activity used fake job offers, then spread malware through stolen developer accounts and public packages.
74
Malware
ScoringMathTea
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 10, 2026
- Last mentioned11h ago
Timeline
2 articles · newest firstESET: Lazarus renews drone targeting; DeceptiveDevelopment hits repositories
The October 28 report covers April to September 2026 and says the two North Korea-aligned operations are distinct, not one coordinated campaign.
64
Appears with
- Lazarusthreat actor · 2
- ESETorganization · 2
- DeceptiveDevelopmentthreat actor · 2
- PteroPSDoormalware · 1
- Gamaredonthreat actor · 1
- BinMergeLoadermalware · 1
- InvisibleFerretmalware · 1
- BeaverTailmalware · 1
- Turlathreat actor · 1
- SumatraPDFproduct · 1
- Rezzuarmalware · 1
- DEV#POPPER RATmalware · 1
- LightlessTeaRmalware · 1
- Roundcubeproduct · 1
- OmniStealermalware · 1
- MortPusLoadermalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.