Lazarus Group
BedrohungsakteurKPauch bekannt als
Weitere Namen und Kennungen dieser Entität.
ATT&CK
Diamond Sleet · Guardians of Peace · HIDDEN COBRA · Labyrinth Chollima · Lazarus Group · NICKEL ACADEMY · ZINC
MISP
APT-C-26 · APT38 · ATK117 · ATK3 · Andariel · Appleworm · BeagleBoyz · Black Artemis · Bluenoroff · Bureau 121 · COPERNICIUM · COVELLITE · Citrine Sleet · DEV-0139 · DEV-1222 · Dark Seoul · Diamond Sleet · Group 77 · Hastati Group · Hidden Cobra · Labyrinth Chollima · Lazarus Group · Moonstone Sleet · NICKEL GLADSTONE · NewRomanic Cyber Army Team · Nickel Academy · Operation AppleJeus · Operation DarkSeoul · Operation GhostSecret · Operation Troy · Sapphire Sleet · Stardust Chollima · Subgroup: Bluenoroff · TA404 · Unit 121 · Whois Hacking Team · Zinc
Since 2009, HIDDEN COBRA actors have leveraged their capabilities to target and compromise a range of victims; some intrusions have resulted in the exfiltration of data while others have been disruptive in nature. Commercial reporting has referred to this activity as Lazarus Group and Guardians of Peace. Tools and capabilities used by HIDDEN COBRA actors include DDoS botnets, keyloggers, remote access tools (RATs), and wiper malware. Variants of malware and tools used by HIDDEN COBRA actors include Destover, Duuzer, and Hangman.
zugeordnete ATT&CK-Gruppen
Zugehörige Bedrohungsgruppen.
verwandte Akteure
Verwandte Einträge.
- Operation Sharpshooter· likely
- STARDUST CHOLLIMA· likely
- TraderTraitor· likely
genutzte Techniken (94)
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
Kampagnen (1)
Kampagnen, die dies verwenden.
genutzte Software (26)
Zugehörige Malware und Tools.
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://threatpost.com/operation-blockbuster-coalition-ties-destructive-attacks-to-lazarus-group/116422/
- https://www.us-cert.gov/ncas/alerts/TA17-164A
- https://www.us-cert.gov/ncas/alerts/TA17-318A
- https://www.us-cert.gov/ncas/alerts/TA17-318B
- https://securelist.com/operation-applejeus/87553/
- https://securelist.com/lazarus-under-the-hood/77908/
- https://www.us-cert.gov/HIDDEN-COBRA-North-Korean-Malicious-Cyber-Activity
- https://www.mcafee.com/enterprise/en-us/assets/white-papers/wp-dissecting-operation-troy.pdf