APT-C-26

2016-08-25 • Qihoo360 • Lazarus（APT-C-26）

52

Related Actors
21

Related Reports

Related Actors

Lazarus

Novetta

First seen: Feb 2016

Last seen: Jun 2026

Appleworm

Symantec

Lazarus

First seen: Apr 2017

Last seen: Feb 2021

Citrine Sleet

Microsoft

Apple Jeus

First seen: Dec 2022

Last seen: May 2026

UNC1720

Mandiant

Apple Jeus

First seen: Oct 2023

Last seen: Aug 2025

REF7001

Elastic

Lazarus

First seen: Nov 2023

Last seen: Oct 2024

Black Artemis

PWC

Lazarus

First seen: Mar 2020

Last seen: Apr 2023

Bureau121

Lazarus

First seen: Nov 2020

Last seen: Nov 2020

COVELLITE

Dragos

Black Artemis

First seen: May 2018

Last seen: May 2018

Moonstone Sleet

Microsoft

Lazarus

First seen: May 2024

Last seen: Nov 2025

DEV-0139

Microsoft

Lazarus

First seen: Dec 2022

Last seen: Dec 2022

Storm-1789

Microsoft

Moonstone Sleet

First seen: May 2024

Last seen: May 2024

G0032

MITRE

Lazarus

First seen: May 2017

Last seen: May 2017

Gods Apostles

Self Given

Lazarus

Gods Disciples

Self Given

Lazarus

Guardiansof Peace

Self Given

Lazarus

First seen: Dec 2014

Last seen: Dec 2014

Group77

Cisco Talos

Lazarus

First seen: Feb 2016

Last seen: Sep 2019

Hastati

Secure Works

Lazarus

First seen: Mar 2013

Last seen: Mar 2013

Hidden Cobra

USCISA

Lazarus

First seen: Jun 2017

Last seen: Mar 2021

New Romanic Cyber Army Team

Mcafee

Guardiansof Peace

First seen: Jul 2013

Last seen: Dec 2014

Greedyman

KRCERT

Lazarus

Labyrinth Chollima

Crowd Strike

Lazarus

First seen: Feb 2018

Last seen: Jun 2026

Stressed Pungsan

Datadog

Moonstone Sleet

First seen: Aug 2024

Last seen: Aug 2024

Nickel Academy

Secure Works

Lazarus

First seen: Dec 2017

Last seen: Oct 2024

Office91

Lazarus

First seen: Sep 2019

Last seen: Sep 2019

TA404

Proofpoint

Lazarus

First seen: Jul 2022

Last seen: Jul 2022

Gleaming Pisces

Paloalto Networks

Apple Jeus

First seen: Sep 2024

Last seen: May 2026

Red Dot

Ahnlab

Labyrinth Chollima

First seen: Jul 2017

Last seen: Sep 2019

Sector A01

NSHC

Lazarus

First seen: Jan 2019

Last seen: Nov 2025

Void Imugi

Trend Micro

Lazarus

First seen: Jun 2024

Last seen: Mar 2025

Selective Pisces

Paloalto Networks

Lazarus

First seen: Sep 2022

Last seen: Sep 2024

Unit121

Lazarus

First seen: Nov 2020

Last seen: Nov 2020

WHOis Team

Mcafee

Lazarus

First seen: Mar 2013

Last seen: Dec 2014

Zinc

Microsoft

Lazarus

First seen: Dec 2017

Last seen: Nov 2022

G1036

MITRE

Moonstone Sleet

First seen: Aug 2024

Last seen: Aug 2024

RGB-D3

Issuemakers Lab

Lazarus

First seen: May 2020

Last seen: Sep 2020

BABYLONGROUP

Chollima Group

Moonstone Sleet

First seen: Aug 2025

Last seen: Sep 2025

APT-Q-1

Qianxin

Lazarus

First seen: Mar 2023

Last seen: Aug 2025

Apple Jeus

Kaspersky

Lazarus

First seen: Aug 2018

Last seen: May 2026

G1049

MITRE

Apple Jeus

First seen: Aug 2025

Last seen: Aug 2025

CTG-2460

Secure Works

Nickel Academy

First seen: Sep 2020

Last seen: Sep 2020

Golden Chollima

Crowd Strike

Citrine Sleet

First seen: Jan 2026

Last seen: May 2026

Pompilus

Symantec

Diamond Sleet

First seen: Apr 2022

Last seen: Apr 2022

UAT-10027

Cisco Talos

Lazarus

First seen: Feb 2026

Last seen: Feb 2026

UTA0040

Volexity

UNC4736

First seen: Mar 2023

Last seen: Mar 2023

UNC4736

Mandiant

Apple Jeus

First seen: Apr 2023

Last seen: May 2026

Diamond Sleet

Microsoft

Zinc

First seen: Apr 2023

Last seen: Feb 2024

Storm-0139

Microsoft

Citrine Sleet

First seen: Apr 2023

Last seen: Apr 2023

Storm-1222

Microsoft

Citrine Sleet

First seen: Apr 2023

Last seen: Apr 2023

WASSONITE

Dragos

Lazarus

First seen: May 2020

Last seen: Feb 2023

ITG03

IBM

Lazarus

First seen: Nov 2021

Last seen: Nov 2021

ATK3

Thales Group

Hidden Cobra

First seen: Oct 2019

Last seen: May 2022

REF9134

Elastic

Lazarus

First seen: Jun 2023

Last seen: Jun 2023

Related Reports

Top Authors

View all reports in this cluster

2026-06-03

Qihoo360

APT-C-26（Lazarus）组织利用CVE-2025-55182与Copperhedge组件的攻击行动分析

#APT-C-26 #CVE-2025-55182 #T1406

2026-01-30

Qihoo360

2025年全球高级持续性威胁（APT）研究报告

#APT-C-26 #APT-C-28 #APT-C-55

2025-12-12

Qihoo360

APT-C-26（Lazarus）组织利用WinRAR漏洞部署Blank Grabber木马的技术分析

#APT-C-26 #BlankGrabber #CVE-2025-8088

2025-11-21

Qihoo360

疑似APT-C-26（Lazarus）组织利用远程IT伪装部署监控程序的攻击行动分析

#APT-C-26

2025-02-11

Qihoo360

2024年全球高级持续性威胁（APT）研究报告

#APT-C-26 #APT-C-55 #Trend

2025-01-20

Qihoo360

APT-C-26（Lazarus）组织持续升级攻击武器，利用Electron程序瞄准加密货币行业

#APT-C-26 #FCCCall

2024-12-26

Qihoo360

APT-C-26（Lazarus）组织使用武器化的IPMsg软件的攻击活动分析

#APT-C-26 #IPMsg

2024-07-05

Qihoo360

揭秘APT-C-26（Lazarus）组织利用PyPI对Windows、Linux和macOS平台的攻击行动

#APT-C-26 #PyPI

2024-01-30

Qihoo360

《2023年全球高级持续性威胁研究报告》：芯片、5G、供应链等领域安全威胁加剧

#APT-C-28 #APT-C-55 #APT-C-26 #Whitepaper

2024-01-19

Qihoo360

APT-C-26（Lazarus）组织使用武器化的开源PDF阅读器的攻击活动分析

#APT-C-26 #SumatraPDF

2023-09-12

Qihoo360

APT-C-26（Lazarus）组织使用EarlyRat的攻击活动分析

#APT-C-26 #EarlyRat #Andariel

2023-06-26

Qihoo360

APT-C-26（Lazarus）组织使用伪造VNC软件的攻击活动分析

#TightVNC #APT-C-26

2023-01-11

Qihoo360

疑似APT-C-26（Lazarus）组织通过加密货币钱包推广信息进行攻击活动分析

#Cryptocurrency #APT-C-26

2022-07-15

Qihoo360

APT-C-26（Lazarus）组织伪造电商组件攻击活动分析报告

#NukeSped #APT-C-26

2022-04-19

Qihoo360

隐藏在投资推介书中的淘金者-APT-C-26（Lazarus）攻击活动分析报告

#Cryptocurrency #CVE-2017-0199 #APT-C-26

View all reports in this cluster