Lazarus Group
Nation-state Mixed North Korea Active
Aliases: Lazarus · Hidden Cobra · Diamond Sleet · Zinc · Labyrinth Chollima · APT38
- Mentions
- 3
- First seen
- 21 Sept 2026
- Last seen
- 21 Oct 2026
Relevant to you · Relevant
- Threat focus:
- espionage / apt
Origin
North Korea — North Korean RGB (Bureau 121)
Profile
The Lazarus Group uses post-quantum cryptography for malware delivery. In Operation FlashHole, Lazarus breaks security and defies control. The Contagious Interview campaign compromised 30,000 devices and stole $10.71 million in cryptocurrency.
Targeted sectors
cryptocurrencyCryptocurrency