95
Sophistication
2008
First Seen
85
Notoriety
92
Stealth
93
Immersive Rating
94
Impact
88
Tactics Variety

Lazarus Group

A North Korean state-linked threat group known for a blend of espionage, cyber-crime, and destructive operations. This group was behind major incidents, including the Sony Pictures hack and the WannaCry ransomware outbreak. Highly resourced, adaptive, and capable across financial theft, supply-chain compromise, and espionage.

Key behaviours to watch:

  • Spear-phishing delivering custom loaders (e.g., Manuscrypt, AppleJeus) for credential theft and remote access.
  • Long-term persistence using DLL side-loading, scheduled tasks, and compromised VPN accounts.
  • Financial operations involving crypto-exchange compromise, mixer abuse, and multi-stage laundering chains.

Immersive coverage includes:

IT Army of Ukraine
75
2013
68
72
88
65
70
Kamacite
88
2013
86
83
85
81
86
Kimusky
62
2021
88
43
86
78
66
Lapsus$
89
2009
92
73
85
81
87
Lazarus Group
95
2008
85
92
93
94
88
LulzSec
50
2011
75
38
62
72
52
MAGNALLIUM
80
2013
56
73
79
58
74
Onyx Sleet
85
2014
80
80
84
71
77