THREAT‑WATCH
Threat Actors
Lazarus Group
Hidden Cobra, Guardians of Peace, APT38
A North Korean state-linked group that combines traditional espionage with large-scale financial theft, widely believed to help fund the North Korean regime.
Lazarus Group has been publicly attributed to a wide range of operations, including the 2014 Sony Pictures breach, the 2016 theft of $81 million from Bangladesh Bank via the SWIFT banking network, and a long-running series of cryptocurrency exchange thefts totaling billions of dollars over the past decade. This financial motive, unusual for a state-sponsored actor, is generally understood to help fund North Korean government programs under international sanctions.
Target Sectors
Financial services and cryptocurrency exchanges specifically for theft, alongside media, defense, and technology organizations for espionage.