Storm-0530 - DPRK Threat Actor | lazarus.day

Storm-0530

2023-04-18 • Microsoft • How Microsoft names threat actors

19

Related Actors
1

Related Reports

Related Actors

Andariel

FSI

First seen: Jul 2017

Last seen: May 2026

UNC4131

Mandiant

Andariel

First seen: Apr 2023

Last seen: Apr 2023

UNC4369

Mandiant

Andariel

First seen: Apr 2023

Last seen: Apr 2023

TA430

Proofpoint

Andariel

First seen: Jan 2024

Last seen: Jan 2024

DEV-0530

Microsoft

Plutonium

First seen: Jul 2022

Last seen: Nov 2022

G0138

MITRE

Andariel

First seen: Sep 2021

Last seen: Sep 2021

APT45

Mandiant

Andariel

First seen: Jul 2024

Last seen: May 2026

Clasiopa

Symantec

Andariel

First seen: Feb 2023

Last seen: Feb 2023

Jumpy Pisces

Paloalto Networks

Andariel

First seen: Jun 2024

Last seen: Apr 2025

Plutonium

Microsoft

Andariel

First seen: Jul 2022

Last seen: Nov 2022

Red Light

KRCERT

Andariel

Sector A04

NSHC

Andariel

First seen: Mar 2020

Last seen: Mar 2025

Silent Chollima

Crowd Strike

Andariel

First seen: Apr 2014

Last seen: Jan 2026

Stonefly

Symantec

Andariel

First seen: Apr 2022

Last seen: Oct 2024

Nickel Hyatt

Secure Works

Andariel

First seen: May 2023

Last seen: Oct 2024

Foolish Slug

Cloudflare

Andariel

First seen: Mar 2026

Last seen: Mar 2026

UNC614

Mandiant

Andariel

First seen: Feb 2023

Last seen: Oct 2023

Hive0079

IBM

Andariel

Onyx Sleet

Microsoft

Plutonium

First seen: Jul 2022

Last seen: Sep 2024

Related Reports

Top Authors

View all reports in this cluster

2023-04-18

Microsoft

How Microsoft names threat actors

#Sleet #DiamondSleet #EmeraldSleet #OnyxSleet #OpalSleet #PearlSleet #RubySleet #SapphireSleet #Lawrencium #Storm-0530 #Storm-0139 #Storm-1222 #Storm-1877 #Storm-0287 #Storm-0954

View all reports in this cluster