Tactics, Techniques & Procedures (TTPs): The Lazarus Group employs a variety of tactics including spear phishing, credential dumping, and the use of malware to exploit vulnerabilities in software products.
Actor Profile & Objectives: The Lazarus Group is known for its sophisticated cyber operations, often targeting financial institutions, government entities, and critical infrastructure. Their objectives include financial gain, espionage, and disruption of services, particularly in adversarial nations.
Recent Campaign Tactics: The group has been observed utilizing advanced persistent threat (APT) techniques, including the deployment of malware such as WannaCry and more recent ransomware variants, alongside social engineering tactics to gain initial access to networks.