95
Sophistication
2008
First Seen
85
Notoriety
92
Stealth
93
Immersive Rating
94
Impact
88
Tactics Variety

Lazarus Group

A North Korean state-linked threat group known for a blend of espionage, cyber-crime, and destructive operations. This group was behind major incidents, including the Sony Pictures hack and the WannaCry ransomware outbreak. Highly resourced, adaptive, and capable across financial theft, supply-chain compromise, and espionage.

Key behaviours to watch:

  • Spear-phishing delivering custom loaders (e.g., Manuscrypt, AppleJeus) for credential theft and remote access.
  • Long-term persistence using DLL side-loading, scheduled tasks, and compromised VPN accounts.
  • Financial operations involving crypto-exchange compromise, mixer abuse, and multi-stage laundering chains.

Immersive coverage includes:

Anonymous
40
2003
95
30
55
60
70
APT1
85
2004
80
45
72
88
70
APT10
92
2006
78
90
90
94
88
APT32
88
2014
70
79
83
87
83
APT34
84
2014
68
74
88
82
86
APT35
73
2014
65
65
81
74
80
Chimera
68
2019
55
63
69
72
61
Cozy Bear
70
2012
57
71
64
64
58