Apple Jeus - DPRK Threat Actor | lazarus.day

Apple Jeus

2018-08-15 • Kaspersky • Operation AppleJeus: Lazarus hits cryptocurrency …

52

Related Actors
25

Related Reports

Related Actors

Lazarus

Novetta

First seen: Feb 2016

Last seen: Jun 2026

Appleworm

Symantec

Lazarus

First seen: Apr 2017

Last seen: Feb 2021

APT-C-26

Qihoo360

Lazarus

First seen: Aug 2016

Last seen: Jun 2026

Citrine Sleet

Microsoft

Apple Jeus

First seen: Dec 2022

Last seen: May 2026

UNC1720

Mandiant

Apple Jeus

First seen: Oct 2023

Last seen: Aug 2025

REF7001

Elastic

Lazarus

First seen: Nov 2023

Last seen: Oct 2024

Black Artemis

PWC

Lazarus

First seen: Mar 2020

Last seen: Apr 2023

Bureau121

Lazarus

First seen: Nov 2020

Last seen: Nov 2020

COVELLITE

Dragos

Black Artemis

First seen: May 2018

Last seen: May 2018

Moonstone Sleet

Microsoft

Lazarus

First seen: May 2024

Last seen: Nov 2025

DEV-0139

Microsoft

Lazarus

First seen: Dec 2022

Last seen: Dec 2022

Storm-1789

Microsoft

Moonstone Sleet

First seen: May 2024

Last seen: May 2024

G0032

MITRE

Lazarus

First seen: May 2017

Last seen: May 2017

Gods Apostles

Self Given

Lazarus

Gods Disciples

Self Given

Lazarus

Guardiansof Peace

Self Given

Lazarus

First seen: Dec 2014

Last seen: Dec 2014

Group77

Cisco Talos

Lazarus

First seen: Feb 2016

Last seen: Sep 2019

Hastati

Secure Works

Lazarus

First seen: Mar 2013

Last seen: Mar 2013

Hidden Cobra

USCISA

Lazarus

First seen: Jun 2017

Last seen: Mar 2021

New Romanic Cyber Army Team

Mcafee

Guardiansof Peace

First seen: Jul 2013

Last seen: Dec 2014

Greedyman

KRCERT

Lazarus

Labyrinth Chollima

Crowd Strike

Lazarus

First seen: Feb 2018

Last seen: Jun 2026

Stressed Pungsan

Datadog

Moonstone Sleet

First seen: Aug 2024

Last seen: Aug 2024

Nickel Academy

Secure Works

Lazarus

First seen: Dec 2017

Last seen: Oct 2024

Office91

Lazarus

First seen: Sep 2019

Last seen: Sep 2019

TA404

Proofpoint

Lazarus

First seen: Jul 2022

Last seen: Jul 2022

Gleaming Pisces

Paloalto Networks

Apple Jeus

First seen: Sep 2024

Last seen: May 2026

Red Dot

Ahnlab

Labyrinth Chollima

First seen: Jul 2017

Last seen: Sep 2019

Sector A01

NSHC

Lazarus

First seen: Jan 2019

Last seen: Nov 2025

Void Imugi

Trend Micro

Lazarus

First seen: Jun 2024

Last seen: Mar 2025

Selective Pisces

Paloalto Networks

Lazarus

First seen: Sep 2022

Last seen: Sep 2024

Unit121

Lazarus

First seen: Nov 2020

Last seen: Nov 2020

WHOis Team

Mcafee

Lazarus

First seen: Mar 2013

Last seen: Dec 2014

Zinc

Microsoft

Lazarus

First seen: Dec 2017

Last seen: Nov 2022

G1036

MITRE

Moonstone Sleet

First seen: Aug 2024

Last seen: Aug 2024

RGB-D3

Issuemakers Lab

Lazarus

First seen: May 2020

Last seen: Sep 2020

BABYLONGROUP

Chollima Group

Moonstone Sleet

First seen: Aug 2025

Last seen: Sep 2025

APT-Q-1

Qianxin

Lazarus

First seen: Mar 2023

Last seen: Aug 2025

G1049

MITRE

Apple Jeus

First seen: Aug 2025

Last seen: Aug 2025

CTG-2460

Secure Works

Nickel Academy

First seen: Sep 2020

Last seen: Sep 2020

Golden Chollima

Crowd Strike

Citrine Sleet

First seen: Jan 2026

Last seen: May 2026

Pompilus

Symantec

Diamond Sleet

First seen: Apr 2022

Last seen: Apr 2022

UAT-10027

Cisco Talos

Lazarus

First seen: Feb 2026

Last seen: Feb 2026

UTA0040

Volexity

UNC4736

First seen: Mar 2023

Last seen: Mar 2023

UNC4736

Mandiant

Apple Jeus

First seen: Apr 2023

Last seen: May 2026

Diamond Sleet

Microsoft

Zinc

First seen: Apr 2023

Last seen: Feb 2024

Storm-0139

Microsoft

Citrine Sleet

First seen: Apr 2023

Last seen: Apr 2023

Storm-1222

Microsoft

Citrine Sleet

First seen: Apr 2023

Last seen: Apr 2023

WASSONITE

Dragos

Lazarus

First seen: May 2020

Last seen: Feb 2023

ITG03

IBM

Lazarus

First seen: Nov 2021

Last seen: Nov 2021

ATK3

Thales Group

Hidden Cobra

First seen: Oct 2019

Last seen: May 2022

REF9134

Elastic

Lazarus

First seen: Jun 2023

Last seen: Jun 2023

Related Reports

Top Authors

View all reports in this cluster

2026-05-29

Poly Swarm

Lazarus Expands Financial Espionage Operations With Memory-Resident RemotePE RAT

#Lazarus #RemotePE #AppleJeus #CitrineSleet #UNC4736 #GleamingPisces #Finance #Cryptocurrency #Fileless #Espionage #FinancialGain #PondRAT #ThemeForestRAT #POOLRAT #T1055 #T1071.001 #T1027 #T1562.006

2026-05-12

Arkm

Lazarus Group: The North Korean Hacking Syndicate’s On-Chain Footprint

#AppleJeus #Lazarus #MoneyLaundering

2025-11-04

tanuki42

It's likely that the market maker DWFLabs was compromised in September 2022

#AppleJeus #DWFLabs

2025-08-25

MITRE

AppleJeus

#AppleJeus #G1049 #T1573 #T1203 #T1543 #T1027 #T1102 #T1071 #T1574 #T1566 #T1620 #T1553 #T1218 #T1546 #T1078 #T1559 #T1678 #T1195 #T1055 #T1189 #T1657 #T1217

2025-05-14

Dtex Systems

Exposing DPRK’s Cyber Underworld

#ITWorker #APT37 #APT43 #APT45 #AppleJeus #CryptoCore #GwisinGang #Konni #MoonstoneSleet #RubySleet #TEMP.Hermit #TraderTraitor #Whitepaper

2025-04-01

Paradigm

Demystifying the North Korean Threat

#AppleJeus #ITWorker #Lazarus #Trend #DangerousPassword #TraderTraitor

2025-01-20

JPCERT

Beware of Contacts through LinkedIn: They Target Your Organization’s Property, Not Yours

#AppleJeus #DangerousPassword #DreamJob #Lazarus

2025-01-10

JPCERT

あなたではなく組織の財産を狙うLinkedIn経由のコンタクトにご用心

#AppleJeus #DangerousPassword #DreamJob #Lazarus

2024-12-06

Proofpoint

A Better Way, YARA-X, Mach-O Feature Extraction, and Malware Similarity

#Youtube #AppleJeus #Bluenoroff #TraderTraitor #YARA

2024-12-06

Radiant Capital

Radiant Capital Incident Update

#AppleJeus #RadiantCapital #UNC4736

2023-10-13

Crowd Strike

Navigating the LABYRINTH: An In-Depth Examination of Interactive Intrusions by a North Korean APT

#LabyrinthChollima #macOS #AppleJeus

2022-12-06

Microsoft

DEV-0139 launches targeted attacks against the cryptocurrency industry

#Cryptocurrency #DEV-0139 #AppleJeus #Wolfic #CitrineSleet

2022-12-05

Malwarebytes

Lazarus group uses fake cryptocurrency apps to plant AppleJeus malware

#Cryptocurrency #APT38 #AppleJeus

2022-12-01

Volexity

Buyer Beware: Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware

#Cryptocurrency #AppleJeus

2022-08-12

Kaspersky

ATTRIBUTION AND BIAS: MY TERRIBLE MISTAKES IN THREAT INTELLIGENCE ATTRIBUTION

#AppleJeus #Scarcruft #Slides

View all reports in this cluster