TA406 - DPRK Threat Actor | lazarus.day

TA406

2021-11-19 • Proofpoint • Triple Threat: North Korea-Aligned TA406 Scams, S…

11

Related Actors
3

Related Reports

Related Actors

Earth Imp

Trend Micro

Konni

First seen: Mar 2025

Last seen: Apr 2026

Sector A07

NSHC

Konni

First seen: Mar 2020

Last seen: Apr 2025

Konni

Cisco Talos

First seen: May 2017

Last seen: Mar 2026

Hermit

Tencent

Konni

First seen: Dec 2018

Last seen: Apr 2020

Opal Sleet

Microsoft

Osmium

First seen: Apr 2023

Last seen: Oct 2023

Osmium

Microsoft

Konni

First seen: Oct 2021

Last seen: Nov 2022

pu NK-003

S2W

Konni

First seen: Aug 2024

Last seen: Aug 2024

Vedalia

Symantec

Konni

First seen: Apr 2024

Last seen: Oct 2024

pu NK-001

S2W

Konni

First seen: Aug 2024

Last seen: Aug 2024

Crooked Pisces

Paloalto Networks

Konni

First seen: Sep 2021

Last seen: Sep 2021

Nickel Juniper

Secure Works

Konni

First seen: Oct 2024

Last seen: Nov 2024

Related Reports

Top Authors

View all reports in this cluster

2026-05-27

Proofpoint

More CVEs, Same Playbook: 2026 Vulnerability Exploitation in the Wild

#TA406 #Phishing #LNK #T1566.001 #T1203 #T1105 #CVE-2026-21510 #T1125

2025-05-13

Proofpoint

TA406 Pivots to the Front

#LNK #TA406

2021-11-19

Proofpoint

Triple Threat: North Korea-Aligned TA406 Scams, Spies, and Steals

#TA406 #TA408 #TA427

View all reports in this cluster