Threat actor
threat_actor:lazarus
Also: North Korean group called Lazarus
North Korean hacking group whose malware and wiping code were reported as matching parts of Olympic Destroyer.
North Korean hacking group whose malware and wiping code were reported as matching parts of Olympic Destroyer.
“the North Korean group called Lazarus”
“some of the same wiper code as had been used by those Lazarus hackers”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | ASSOCIATED_WITH | Olympic Destroyer | Uncertain | 77 |
Olympic Destroyer ASSOCIATED_WITH Lazarus
Researchers found wiper-code similarities between Olympic Destroyer and malware associated with Lazarus, but the episode presents this as one potentially misleading clue.
Uncertain Confidence 95% · Andy Greenberg EP 77 Details
“There were, for instance, code matches with malware from the North Korean group called Lazarus”