lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
G0138
2021-09-29 •
MITRE
•
Andariel
Share:
19
Related Actors
161
Related Reports
Related Actors
Andariel
FSI
First seen:
Jul 2017
Last seen:
May 2026
UNC4131
Mandiant
Andariel
First seen:
Apr 2023
Last seen:
Apr 2023
UNC4369
Mandiant
Andariel
First seen:
Apr 2023
Last seen:
Apr 2023
TA430
Proofpoint
Andariel
First seen:
Jan 2024
Last seen:
Jan 2024
DEV-0530
Microsoft
Plutonium
First seen:
Jul 2022
Last seen:
Nov 2022
APT45
Mandiant
Andariel
First seen:
Jul 2024
Last seen:
May 2026
Clasiopa
Symantec
Andariel
First seen:
Feb 2023
Last seen:
Feb 2023
Jumpy Pisces
Paloalto Networks
Andariel
First seen:
Jun 2024
Last seen:
Apr 2025
Plutonium
Microsoft
Andariel
First seen:
Jul 2022
Last seen:
Nov 2022
Red Light
KRCERT
Andariel
Sector A04
NSHC
Andariel
First seen:
Mar 2020
Last seen:
Mar 2025
Silent Chollima
Crowd Strike
Andariel
First seen:
Apr 2014
Last seen:
Jan 2026
Stonefly
Symantec
Andariel
First seen:
Apr 2022
Last seen:
Oct 2024
Nickel Hyatt
Secure Works
Andariel
First seen:
May 2023
Last seen:
Oct 2024
Foolish Slug
Cloudflare
Andariel
First seen:
Mar 2026
Last seen:
Mar 2026
Storm-0530
Microsoft
DEV-0530
First seen:
Apr 2023
Last seen:
Apr 2023
UNC614
Mandiant
Andariel
First seen:
Feb 2023
Last seen:
Oct 2023
Hive0079
IBM
Andariel
Onyx Sleet
Microsoft
Plutonium
First seen:
Jul 2022
Last seen:
Sep 2024
Related Reports in This Cluster
Top Authors
View G0138 reports only
2026-05-28
ESET
ESET APT Activity Report Q4 2025–Q1 2026
#Andariel
#DreamJob
#DangerousPassword
#DeceptiveDevelopment
#Scarcruft
#Rook
#T1513
2026-05-21
Ahnlab
2026년 4월 국내외 금융권 관련 보안 이슈
#Andariel
#Bluenoroff
#GeniexLoader
#WGear
2026-05-12
Google
GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access
#APT45
#T1587.004
#T1588.005
#T1588.007
#Trend
2026-04-03
Domaintools
DPRK Malware Modularity: Diversity and Functional Specialization
#Andariel
#Kimsuky
#Lazarus
#Trend
2026-03-03
Cloudflare
Introducing the 2026 Cloudflare Threat Report
#FoolishSlug
#PatheticSlug
#PutridSlug
#Trend
2026-02-27
SOCRadar
Dark Web Profile: Andariel
#Andariel
#T1588
#T1005
#T1590
#T1203
#T1566
#T1189
#T1027
#T1204
#T1592
#T1049
#T1105
#T1057
2026-02-12
Ahnlab
2026년 1월 APT 그룹 동향 보고서
#Andariel
#Kimsuky
#Trend
2026-01-27
S3N4T0R
Silent Chollima APT Adversary Simulation
#SilentChollima
2026-01-22
With Secure
To the past and beyond: Andariel’s latest arsenal and cyberattacks
#Andariel
#GopherRAT
#JelusRAT
#StarshellRAT
2025-11-06
AUDFAT
One person and four entities listed under the Autonomous Sanctions Regulations 2011 – Democratic People’s Republic of Korea
#Andariel
#Kimsuky
#Lazarus
#Sanctions
2025-10-23
Trellix
The CyberThreat Report
#Andariel
#Kimsuky
#Lazarus
#Trend
#T1574.002
#T1204.004
#T1564.006
#T1027.006
2025-07-08
USTreasury
Sanctions Imposed on DPRK IT Workers Generating Revenue for the Kim Regime
#Sanctions
#Andariel
#ITWorker
2025-06-17
Dtex Systems
Insider Sabotage: When Trusted Hires Turn Rogue
#APT45
#ITWorker
2025-05-14
Dtex Systems
Exposing DPRK’s Cyber Underworld
#ITWorker
#APT37
#APT43
#APT45
#AppleJeus
#CryptoCore
#GwisinGang
#Konni
#MoonstoneSleet
#RubySleet
#TEMP.Hermit
#TraderTraitor
#Whitepaper
2025-04-23
Paloalto Networks
Extortion and Ransomware Trends January-March 2025
#JumpyPisces
#Ransomware
#Trend
1
2
3
»
11
View G0138 reports only