Lazarus Group

Associated CVEs

Coverage timeline

• 
  Lazarus shares tools with Gunra ransomware in South Korea attacks

  databreaches.net · Jul 31, 2026
• 
  North Korean Hackers Exploit Fake Zoom Calls to Steal Crypto Data

  securityonline.info · Jul 30, 2026
• 
  BlueNoroff Zoom Phishing Kit Hits Crypto Wallets With Profiling

  thehackernews.com · Jul 24, 2026
• 
  Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

  securityonline.info · Jul 3, 2026
• 
  Ghost CMS mass hack via CVE-2026-26980 fuels ClickFix attack wave

  securityaffairs.com · May 31, 2026
• 
  North Korean hackers deploy memory only toolset against banks

  securityonline.info · May 29, 2026
• 
  Lazarus Uses Fileless RemotePE RAT Powered by DPAPI Loader

  securityaffairs.com · May 26, 2026
• 
  Lazarus Group Deploys Memory Only RAT Against Crypto and Banks

  thehackernews.com · May 25, 2026
• 
  Fake Google Authenticator Chrome Extension Hits 260k Users

  dti.domaintools.com · May 7, 2026
• 
  Lazarus Exploits Fake Interviews to Steal Developer Credentials

  dti.domaintools.com · May 1, 2026
• 
  North Korea’s BlueNoroff uses fake Zoom to steal crypto exec data

  www.darkreading.com · Apr 28, 2026
• 
  North Korean hackers use fake Zoom links to steal crypto wallets

  www.infosecurity-magazine.com · Apr 28, 2026
• 
  Lazarus Group targets macOS users with ClickFix fake meeting scam

  www.darkreading.com · Apr 24, 2026
• 
  North Korea linked hackers steal $290M from Kelp DAO DeFi

  www.securityweek.com · Apr 21, 2026
• 
  Lazarus linked to $293m KelpDAO heist via LayerZero flaw

  www.infosecurity-magazine.com · Apr 21, 2026