group-ib-hi-tech-crime-trends-2019-2020-trend-report-2019-en.pdf (4 MB)

Group-IB's 2019/2020 trend report describes a period of rising state sponsored cyber operations, cyberweapons, and attacks on financial-sector infrastructure. The excerpt does not provide a detailed Lazarus case, but it frames the relevant threat landscape around SWIFT theft, ATM Switch attacks, supply chain compromise, BGP and DNS hijacking, and telecom and energy targeting. For DPRK tracking, the report is useful as context for the financial and infrastructure attack patterns that overlapped with Lazarus-era bank theft activity.