Lazarus Group's infrastructure reuse leads to discovery of new malwareCisco Talos·Aug 24, 12:04 UTC · Aug 24, 2023MalwareCVE-2022-4796660
Operation Blockbuster revealedKaspersky Securelist·Feb 24, 13:10 UTC · Feb 24, 2016Exploit / PoCCVE-2015-658560
Lazarus Group exploited ManageEngine vulnerability to target critical infrastructureHelp Net Security·Aug 25, 00:00 UTC · Aug 25, 2023Vulnerability in the wildCVE-2022-4796660
Lazarus APT updates its toolset in watering hole attacksKaspersky Securelist·Apr 24, 05:00 UTC · Apr 24, 2025Threat actor60
Greedy North Korean Hackers Targeting Cryptocurrencies and Point-ofThe Hacker News·Dec 20, 13:18 UTC · Dec 20, 2017Ransomware60
Operation Blockbuster revealed the Lazarus Group ActivitiesSecurity Affairs·Oct 17, 21:34 UTC · Oct 17, 2017Threat actorCVE-2015-658560
Treasury updates Lazarus Group sanctions with digital currency address linked to Ronin Bridge hackCyberScoop·Apr 14, 18:29 UTC · Apr 14, 2022Threat actor in the wild60
Operation SyncHole: Lazarus APT targets supply chains in South KoreaSecurity Affairs·Apr 25, 10:50 UTC · Apr 25, 2025Threat actor60
Lazarus APT exploits Zoho ManageEngine flaw to target an Internet backbone infrastructure providerSecurity Affairs·Aug 24, 17:50 UTC · Aug 24, 2023Threat actorCVE-2022-4796660
Lazarus Group's DeathNote Campaign Reveals Shift in TargetsInfosecurity Magazine·Apr 12, 17:00 UTC · Apr 12, 2023Threat actor60
Crypto analysts stunned by Lazarus Group’s capabilities in $1.46B Bybit theftCyberScoop·Feb 25, 18:51 UTC · Feb 25, 2025Threat actor in the wild60
Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT MalwareThe Hacker News·Aug 25, 06:26 UTC · Aug 25, 2023MalwareCVE-2022-4796660
Lazarus Group deceives developers with 6 new malicious npm packagesCyberScoop·Mar 12, 22:31 UTC · Mar 12, 2025Threat actor in the wild160
Mounting evidence points to North Korean group for global ransomware attackCyberScoop·May 23, 17:17 UTC · May 23, 2017Ransomware in the wild60
Treasury sanctions, DOJ charges two Chinese nationals for helping North Korean hackersCyberScoop·Mar 2, 21:59 UTC · Mar 2, 2020Policy & legal in the wild60
US Sanctions 3 North Korean Hacking Groups Accused for Global Cyber AttacksThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2019Policy & legal55
Lazarus Group Malware Targets Legitimate SoftwareInfosecurity Magazine·Oct 30, 17:00 UTC · Oct 30, 2023Malware55
North Korea's Lazarus Group Deploys New Kaolin RAT via Fake Job LuresThe Hacker News·Apr 26, 05:06 UTC · Apr 26, 2024MalwareCVE-2024-21338CVE-2023-4279360
Lazarus Group Using Log4j Exploits to Deploy Remote Access TrojansThe Hacker News·Dec 12, 04:59 UTC · Dec 12, 2023MalwareCVE-2021-44228CVE-2021-44832CVE-2023-4279360
Analysts expect Lazarus Group to evolve, clean up opsecCyberScoop·Sep 10, 16:24 UTC · Sep 10, 2018Threat actor in the wild60
DHS issues report on Lazarus Group's botnet infrastructureCyberScoop·Jun 13, 20:52 UTC · Jun 13, 2017Malware in the wild60
Lazarus Group Exploits Google Chrome Vulnerability to Control Infected DevicesThe Hacker News·Nov 4, 05:56 UTC · Nov 4, 2024VulnerabilityCVE-2024-494760
Lazarus Group Targets South Korean Finance Firm Via ZeroInfosecurity Magazine·Mar 8, 17:00 UTC · Mar 8, 2023Threat actor60
Hacking campaign on nuclear, defense sectors shares Lazarus Group tools, report saysCyberScoop·Dec 12, 15:28 UTC · Dec 12, 2018Threat actor in the wild60
Kaspersky: North Korean hackers getting more careful, targeted in financial hacksCyberScoop·Jan 9, 23:19 UTC · Jan 9, 2020Exploit / PoC in the wild60
Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial EntityThe Hacker News·Mar 11, 06:29 UTC · Mar 11, 2023Exploit / PoC60
Hackers tied to North Korea target South Korea through Google Play Store, researchers sayCyberScoop·Nov 20, 20:08 UTC · Nov 20, 2017Exploit / PoC in the wild60
Trickbot gang and Lazarus APT, hidden link behind an epochal phenomenaSecurity Affairs·Dec 12, 11:56 UTC · Dec 12, 2019Threat actor60
Years into these games’ histories, attackers are still creating “Fortnite” and “Roblox”Cisco Talos·Aug 24, 18:00 UTC · Aug 24, 2023Ransomware60
A server likely used by Lazarus Group offers clues to a broader espionage campaignCyberScoop·Mar 4, 02:09 UTC · Mar 4, 2019Threat actor in the wild60
Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus GroupThe Hacker News·Aug 19, 08:12 UTC · Aug 19, 2024Exploit / PoCCVE-2024-38193CVE-2024-2133860
Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePEThe Hacker News·Sep 3, 03:44 UTC · Sep 3, 2025Malware55
North Korea Targets Crypto Devs Through NPM PackagesInfosecurity Magazine·Feb 13, 10:15 UTC · Feb 13, 2025Malware55
North Korea’s Lazarus group attacked three companies involved in drone developmentCyberScoop·Oct 23, 21:50 UTC · Oct 23, 2025Threat actor in the wild60
North Korean hackers turn focus to cryptocurrency, point-ofCyberScoop·Dec 21, 14:32 UTC · Dec 21, 2017Exploit / PoC in the wild60
Lazarus Group Exploits Google Chrome Flaw in New CampaignInfosecurity Magazine·Oct 24, 17:00 UTC · Oct 24, 2024Threat actorCVE-2024-494760
North Korea aims 'TraderTraitor' malware at cryptocurrency workersCyberScoop·Apr 19, 14:58 UTC · Apr 19, 2022Malware in the wild60
Lazarus Group Targets macOS in Supply Chain AssaultInfosecurity Magazine·Sep 11, 17:00 UTC · Sep 11, 2023Threat actor60
Hacking tools used by North Korea's Lazarus Group aimed at Russian targetsCyberScoop·Feb 19, 21:42 UTC · Feb 19, 2019Threat actor in the wild60