Lazarus Group

Lazarus Group (also known as APT38 or Hidden Cobra) is a North Korea–linked, state-sponsored hacking collective active since at least 2009. They’ve carried out high-profile cyber-espionage and financially motivated operations – from the Sony Pictures breach (2014) and WannaCry ransomware (2017) to recent cryptocurrency heists – using spear-phishing, custom malware, and sophisticated social-engineering tactics. Their dual mission combines intelligence gathering for the regime with revenue-generating attacks to evade international sanctions.