Tactics, Techniques & Procedures (TTPs): The Lazarus Group employs a range of tactics including spear-phishing, credential dumping, and the use of custom malware to achieve their objectives. Their operations often focus on financial gain and espionage.
Actor Profile & Objectives: The Lazarus Group is known for its sophisticated cyber operations that target financial institutions, critical infrastructure, and government entities. Their primary objectives include espionage, financial theft, and disruption of services. This group has been linked to various high-profile cyber incidents, including the 2014 Sony Pictures hack and the 2017 WannaCry ransomware attack.
Recent Campaign Tactics: Recent activities attributed to the Lazarus Group involve the use of advanced malware strains and social engineering tactics to infiltrate networks. They have been observed leveraging supply chain attacks and exploiting vulnerabilities in widely used software to gain initial access.