Attributed metadata history
Up to 100 retained publisher events per page for 12c52cc08fa2352be3945ca38eaa752da01fa7007570040957e2a90a81c23ccd. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_6df1fb5096a2991dbd
observed · 2026-10-13 17:53:03 UTC
Authors: Yun Zheng Hu and Mick Koomen Summary Last year, we published research about a North Korean Lazarus subgroup targeting financial and cryptocurrency organizations, encountered during multiple incident response engagements. This Lazarus subgroup overlaps with activity linked to AppleJeus, Citrine Sleet, UNC4736, and Gleaming Pisces. In one investigation, we observed that the actor had replaced … Continue reading RemotePE: The Lazarus RAT that lives in memory →
Fingerprint: 78ba51231ed96ffb494d4b5aac3e6ab7d7eccbb684929126ce62cf7b5c237eab
intelligence_src_6df1fb5096a2991dbd
observed · 2026-10-13 17:53:03 UTC
available
Fingerprint: 460dbc36e8eeea4c8056749ae7b3c4427a8ed765b994b55571c25ea91055512d