Search all coverage

Threat actor

Lazarus Group

MITRE G0032 Malpedia KP aka Lazarus

Tracked by CyberSIXT since Apr 21, 2026 · last activity Sep 7, 2026

Associated CVEs

CVE-2025-49113KEV CVE-2026-62893 CVE-2026-26980 CVE-2026-62832 CVE-2026-68820KEV

Coverage timeline

Researchers Map Lazarus Into Six North Korean Cyber Units
www.infosecurity-magazine.com · Sep 7, 2026
North Korean Hackers Trojanised HAProxy to Alter Selected Web Pages
thehackernews.com · Sep 4, 2026
Lazarus Group exploits CVE‑2026‑68820 via fake job offers
securityaffairs.com · Aug 13, 2026
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day
www.infosecurity-magazine.com · Aug 12, 2026
MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited
www.malwarebytes.com · Aug 12, 2026
Lazarus uses fake job offers to exploit Windows CVE-2026-68820
www.securityweek.com · Aug 12, 2026
Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks
securityonline.info · Aug 12, 2026
Lazarus hits defence via fake job PDFs, CVE-2026-68820
research.checkpoint.com · Aug 11, 2026
Lazarus NullReceiver malware uses npm Ethereum queries for C2
www.infosecurity-magazine.com · Aug 11, 2026
North Korean Hackers Hijack NPM Packages via Social Engineering
securityonline.info · Aug 4, 2026
Lazarus shares tools with Gunra ransomware in South Korea attacks
databreaches.net · Jul 31, 2026
North Korean Hackers Exploit Fake Zoom Calls to Steal Crypto Data
securityonline.info · Jul 30, 2026
BlueNoroff Zoom Phishing Kit Hits Crypto Wallets With Profiling
thehackernews.com · Jul 24, 2026
Lazarus-Linked npm Malware Masquerades as Rollup Polyfills
securityonline.info · Jul 3, 2026
Ghost CMS mass hack via CVE-2026-26980 fuels ClickFix attack wave
securityaffairs.com · May 31, 2026
North Korean hackers deploy memory only toolset against banks
securityonline.info · May 29, 2026
Lazarus Uses Fileless RemotePE RAT Powered by DPAPI Loader
securityaffairs.com · May 26, 2026
Lazarus Group Deploys Memory Only RAT Against Crypto and Banks
thehackernews.com · May 25, 2026
Fake Google Authenticator Chrome Extension Hits 260k Users
dti.domaintools.com · May 7, 2026
Lazarus Exploits Fake Interviews to Steal Developer Credentials
dti.domaintools.com · May 1, 2026
North Korea’s BlueNoroff uses fake Zoom to steal crypto exec data
www.darkreading.com · Apr 28, 2026
North Korean hackers use fake Zoom links to steal crypto wallets
www.infosecurity-magazine.com · Apr 28, 2026
Lazarus Group targets macOS users with ClickFix fake meeting scam
www.darkreading.com · Apr 24, 2026
North Korea linked hackers steal $290M from Kelp DAO DeFi
www.securityweek.com · Apr 21, 2026
Lazarus linked to $293m KelpDAO heist via LayerZero flaw
www.infosecurity-magazine.com · Apr 21, 2026