Earth Imp - DPRK Threat Actor | lazarus.day

Earth Imp

2025-03-18 • Trend Micro • ZDI-CAN-25373 Windows Shortcut Exploit Abused as …

11

Related Actors
2

Related Reports

Related Actors

Sector A07

NSHC

Konni

First seen: Mar 2020

Last seen: Apr 2025

Konni

Cisco Talos

First seen: May 2017

Last seen: Mar 2026

Hermit

Tencent

Konni

First seen: Dec 2018

Last seen: Apr 2020

Opal Sleet

Microsoft

Osmium

First seen: Apr 2023

Last seen: Oct 2023

Osmium

Microsoft

Konni

First seen: Oct 2021

Last seen: Nov 2022

pu NK-003

S2W

Konni

First seen: Aug 2024

Last seen: Aug 2024

Vedalia

Symantec

Konni

First seen: Apr 2024

Last seen: Oct 2024

TA406

Proofpoint

Konni

First seen: Nov 2021

Last seen: May 2026

pu NK-001

S2W

Konni

First seen: Aug 2024

Last seen: Aug 2024

Crooked Pisces

Paloalto Networks

Konni

First seen: Sep 2021

Last seen: Sep 2021

Nickel Juniper

Secure Works

Konni

First seen: Oct 2024

Last seen: Nov 2024

Related Reports

Top Authors

View all reports in this cluster

2026-04-16

Trend Micro

2025 APT Report: Staying Ahead of the Modern Threat Landscape

#EarthImp #EarthKumiho #EarthManticore #Trend #VoidDokkaebi

2025-03-18

Trend Micro

ZDI-CAN-25373 Windows Shortcut Exploit Abused as Zero-Day in Widespread APT Campaigns

#EarthImp #EarthKumiho #EarthManticore #LNK #VoidImugi

View all reports in this cluster