Tactics, Techniques & Procedures (TTPs): The Lazarus Group employs a range of tactics including spear-phishing, malware deployment, and exploitation of zero-day vulnerabilities to achieve their objectives. They are known for their sophisticated use of social engineering and advanced persistent threat (APT) methodologies.
Actor Profile & Objectives: The Lazarus Group is a state-sponsored hacking group attributed to North Korea, primarily focused on financial gain and espionage. Their operations are often linked to the North Korean government, aiming to fund state activities through cybercrime. The group has been involved in high-profile attacks against financial institutions, cryptocurrency exchanges, and critical infrastructure.
Recent Campaign Tactics: Recently, the Lazarus Group has intensified its focus on cryptocurrency theft, leveraging advanced social engineering tactics to infiltrate exchanges and wallets. They have employed malware variants designed to exploit vulnerabilities in blockchain technology, which has resulted in significant financial losses for their targets.