CYFIRMA profiles Lazarus Group as a North Korean state-sponsored threat actor active since at least 2009, combining espionage, political objectives, and financially motivated cybercrime. The excerpt lists a broad alias set including Hidden Cobra, APT38, Andariel, Bluenoroff, AppleJeus, TraderTraitor, TA444, and UNC4899, along with targeting across Asia, Europe, the Americas, and the Middle East. The malware and tool inventory spans destructive malware, RATs, loaders, stealers, tunneling tools, and financial-crime tooling such as WannaCry, MATA, Dtrack, BADCALL, HOPLIGHT, RATANKBA, AppleJeus, RustBucket, BeaverTail, and LightlessCan. The ATT&CK mapping highlights reconnaissance, infrastructure acquisition, spearphishing, drive-by compromise, valid accounts, client-side exploitation, scripting, persistence, DLL side-loading, defense evasion, credential access, and discovery, making the profile useful as a consolidated reference for Lazarus tradecraft and detection coverage.