Lazarus Group is a North Korea-linked operation (under the RGB) responsible for some of the largest financial thefts in history, increasingly focused on cryptocurrency to generate state revenue.

Key facts

• State-linked and focused on revenue generation for the North Korean regime.
• Linked to the Bybit crypto heist of roughly 1.5 billion US dollars via a wallet supply-chain compromise.
• Estimated to have stolen billions of dollars in cryptocurrency.
• Uses supply-chain attacks, fake job lures and social engineering to reach targets.

Why it matters

Lazarus turns cyber intrusions directly into cash, targeting crypto platforms and financial firms. Those organisations must monitor for exposed credentials and supply-chain risk.

How DarkThreatX helps

DarkThreatX tracks threat-actor activity, leaked credentials and exposed data across the dark web so security teams can act on early warning. Run a free dark web scan or explore the platform.