Tactics, Techniques & Procedures (TTPs): The Lazarus Group is known for its sophisticated cyber espionage and cybercrime capabilities, employing a range of tactics including spear phishing, malware deployment, and ransomware attacks. Their operations often target financial institutions, critical infrastructure, and government entities.
Actor Profile & Objectives: The Lazarus Group, attributed to North Korea, has been active since at least 2009 and is believed to be operated by the North Korean government. Their objectives include espionage, theft of funds, and disruption of services. They are particularly focused on stealing cryptocurrency and targeting financial systems to fund the regime.
Recent Campaign Tactics: Recent campaigns have included the use of advanced malware such as WannaCry and targeting cryptocurrency exchanges. They have also been reported to exploit vulnerabilities in widely used software to gain access to sensitive systems.