Lazarus is a notorious hacking organization of Masked Actors, known as an advanced persistent threat (APT) group. With links to North Korea, it’s been tied to many high-profile cyberattacks, including 2014’s Sony Pictures hack and 2017’s WannaCry ransomware attack. Just like its biblical namesake, Lazarus has a habit of disappearing and re-emerging under new identities to evade detection.
Targets range from financial institutions to entertainment companies. Victims are often large entities with critical infrastructure, substantial financial assets, or strategic information. Lazarus intensified attacks on cryptocurrency services in 2024.
Individual identities remain largely unknown, but Lazarus is believed to operate under the Reconnaissance General Bureau, North Korea’s primary intelligence agency.
