Lazarus Group
| Actor Type | Nation State |
|---|---|
| Attributed to Nation | North Korea |
| Associated Threat Actor | North Korean Reconnaissance General Bureau |
The Lazarus Group intrusion set was originally identified by Novetta under Operation Blockbuster which attributed the 2014 cyber attack against Sony Pictures Entertainment to the Lazarus Group.
Over time, different researchers have linked the group to multiple attacks globally and as a result the name has become broader in terms of the actor or actors it refers to.
Indictments by the US government have linked Lazarus to the Reconnaissance General Bureau (RGB) which is a military intelligence agency of the Democratic People’s Republic of Korea (DPRK).
Cyber Threat Graph Context
Explore how this Intrusion Set relates to the wider threat graph
Lazarus Group Threat Reports
Operation Blockbuster: Unraveling the Long Thread of the Sony Attack
This report by Novetta covers 'Operation Blockbuster' which was a Novetta-led coalition of private industry partners aiming to understand and ...