D
CyberNorth Korea

Lazarus Group

State-sponsored cyber threat groupActivePending verification

Also known as: HIDDEN COBRA, Diamond Sleet, ZINC, Labyrinth Chollima

CyberPRK
Identification silhouette. Not drawn to scale between entries.
Fact cardConfidence · Source
System
TypeState-sponsored cyber threat group
Alternative designationsHIDDEN COBRA, Diamond Sleet, ZINC, Labyrinth Chollima
ProliferationOrigin country only
Active since2009At least 2009Med[1]
MITRE ATT&CK IDG0032High[1]
Attribution and activity
Attributed sponsorReconnaissance General Bureau (RGB)Med[1]
TargetsFinancial institutions, technology companies, security researchers, mediaMed[1]
Notable activitySony Pictures attack (2014); Operation Dream Job (2019–2020)Med[1]
Summary

North Korean state-sponsored group attributed to the Reconnaissance General Bureau.

Draft entry. Values come from the cited public sources and are awaiting editor verification.
CompareJSON
Operators
North Korea
Sources
  1. Lazarus Group, Group G0032, MITRE ATT&CK
    Published/updated 2026-07-31 · Tier 2 · checked 2026-10-03
Change log
  • 2026-10-03 Initial draft entry from cited open sources
  • 2026-10-03 Added identification art