Kmsec - DPRK Threat Intelligence | lazarus.day

Kmsec

https://kmsec.uk

0

Named Actors
10

Published Reports
1

Years Active
10

Avg Reports/Year

Published Reports

Top Tags

Top Actors

Cluster Coverage

2026-06-10

Kmsec

Hunting North Korea's job adverts on Google Docs

#FamousChollima

2026-05-01

Kmsec

North Korea's abuse of Cloudflare Workers and Pages

#FamousChollima #NPM #PylangGhost

2026-03-17

Kmsec

Contagious Trader campaign - Coordinated weaponisation of cryptocurrency trading bots by suspected DPRK malware operators

#ContagiousTrader #FamousChollima #NPM

2026-03-13

Kmsec

First instance of PylangGhost RAT observed on npm

#FamousChollima #PylangGhost #NPM

2026-02-26

Kmsec

Novel DPRK stager using Pastebin and text steganography

#FamousChollima #NPM #Steganography

2026-02-22

Kmsec

Tracking DPRK operator IPs over time

#FamousChollima #NPM

2026-02-21

Kmsec

DPRK tests Google Drive as a malware stager

#FamousChollima #NPM

2026-02-16

Kmsec

Exposed DPRK reference malware and logs

#FamousChollima #NPM

2026-02-13

Kmsec

VMWare artifacts left by a FAMOUS CHOLLIMA operator

#FamousChollima #NPM

2026-01-19

Kmsec

npm package bigmathix and the BigSquatRat campaign behind it

#T1082 #Suspicious