Lasarus-groep

Nota: Moet nie verwar word met die Lazarus Group wat Ford, Mazda en Kia-motors in Centurion, Pretoria verkoop nie.

Lasarus-groep (Engels: Lazarus Group, ook bekend onder byname soos Guardians of Peace, Hidden Cobra of Whois Team)^[1]^[2]^[3]) is 'n kubermisdaadgroep wat bestaan uit 'n onbekende aantal individue wat deur die Noord-Koreaanse staat bestuur word. Alhoewel daar nie veel oor die Lasarus-groep bekend is nie, het navorsers baie kuberaanvalle aan hulle toegeskryf tussen 2010 en 2022. Oorspronklik 'n kriminele groep, is die groep nou aangewys as 'n gevorderde aanhoudende bedreiging weens die beoogde aard, bedreiging en wye verskeidenheid metodes gebruik wanneer 'n operasie uitgevoer word. Name wat deur kuberveiligheidsorganisasies gegee word, sluit in HIDDEN COBRA (wat deur die Verenigde State se intelligensiegemeenskap gebruik word om na kwaadwillige kuberaktiwiteite deur die Noord-Koreaanse regering in die algemeen te verwys)^[4]^[5] en Zink (deur Microsoft).^[6]^[7]^[8]

Die Lazarus-groep het sterk bande met Noord-Korea. ^[9]^[10] Die Amerikaanse Federal Bureau of Investigation verklaar dat die Lasarus-groep 'n Noord-Koreaanse "staatsgeborgde kuberinbraakorganisasie" is.^[11] Volgens die Noord-Koreaanse oorloper Kim Kuk-song staan die eenheid intern in Noord-Korea bekend as Skakelkantoor 414.^[12]

Die naam "Lasarus" kom van die Bybelse Lasarus van Betanië, wat uit die dood opgewek is volgens die Evangelie volgens Johannes. ’n Kenner het in ’n onderhoud verduidelik: “Wanneer jy dink jy het Lasarus verslaan, slaan hulle weer toe”, vandaar die verband. Kubersekuriteitsmaatskappye het met die naam "Lasarus" vorendag gekom.^[13].

Verwysings

↑ "North Korea Designations; Global Magnitsky Designation". U.S. Department of the Treasury. 2019. LAZARUS GROUP (a.k.a. "APPLEWORM"; a.k.a. "APT-C-26"; a.k.a. "GROUP 77"; a.k.a. "GUARDIANS OF PEACE"; a.k.a. "HIDDEN COBRA"; a.k.a. "OFFICE 91"; a.k.a. "RED DOT"; a.k.a. "TEMP.HERMIT"; a.k.a. "THE NEW ROMANTIC CYBER ARMY TEAM"; a.k.a. "WHOIS HACKING TEAM"; a.k.a. "ZINC"), Potonggang District...
↑ "Lazarus Group | InsightIDR Documentation". Rapid7. Rapid7. Andariel, Appleworm, APT-C-26, APT38, Bluenoroff, Bureau 121, COVELLITE, Dark Seoul, GOP, Group 77, Guardian of Peace, Guardians of Peace, Hastati Group, HIDDEN COBRA, Labyrinth Chollima, Lazarus, NewRomantic Cyber Army Team, NICKEL ACADEMY, Operation AppleJesus, Operation DarkSeoul, Operation GhostSecret, Operation Troy, Silent Chollima, Subgroup: Andariel, Subgroup: Bluenoroff, Unit 121, Whois Hacking Team, WHOis Team, ZINC
↑ "NICKEL ACADEMY | Secureworks". secureworks.com. Black Artemis (PWC), COVELLITE (Dragos), CTG-2460 (SCWX CTU), Dark Seoul, Guardians of Peace, HIDDEN COBRA (U.S. Government), High Anonymous, Labyrinth Chollima (CrowdStrike), New Romanic Cyber Army Team, NNPT Group, The Lazarus Group, Who Am I?, Whois Team, ZINC (Microsoft)
↑ "HIDDEN COBRA – North Korea's DDoS Botnet Infrastructure | CISA". us-cert.cisa.gov. CISA. 2017.
↑ "Lazarus Group, HIDDEN COBRA, Guardians of Peace, ZINC, NICKEL ACADEMY, Group G0032 | MITRE ATT&CK®". MITRE ATT&CK. MITRE Corporation.
↑ "Microsoft and Facebook disrupt ZINC malware attack to protect customers and the internet from ongoing cyberthreats". Microsoft on the Issues (in Engels (VSA)). 19 Desember 2017. Besoek op 16 Augustus 2019.
↑ "FBI thwarts Lazarus-linked North Korean surveillance malware". IT PRO (in Engels). Besoek op 16 Augustus 2019.
↑ Guerrero-Saade, Juan Andres; Moriuchi, Priscilla (16 Januarie 2018). "North Korea Targeted South Korean Cryptocurrency Users and Exchange in Late 2017 Campaign". Recorded Future. Geargiveer vanaf die oorspronklike op 16 Januarie 2018.
↑ "Who is Lazarus? North Korea's Newest Cybercrime Collective". www.cyberpolicy.com. Besoek op 26 Augustus 2020.
↑ Beedham, Matthew (9 Januarie 2020). "North Korean hacker group Lazarus is using Telegram to steal cryptocurrency". Hard Fork | The Next Web (in Engels (VSA)). Besoek op 26 Augustus 2020.
↑ "PARK JIN HYOK". Federal Bureau of Investigation (in Engels (VSA)). Besoek op 26 Augustus 2020.
↑ "Drugs, arms, and terror: A high-profile defector on Kim's North Korea". BBC News (in Engels (VK)). 10 Oktober 2021. Besoek op 11 Oktober 2021.
↑ https://www.youtube.com/watch?v=8Wv9kgckctU, Unterschätzen wir Nordkorea? - Was hinter der "Lazarus" Hackergruppe steckt, Galileo, ProSieben, 2022-01-06

[Treasury2019-1] "North Korea Designations; Global Magnitsky Designation". U.S. Department of the Treasury. 2019. LAZARUS GROUP (a.k.a. "APPLEWORM"; a.k.a. "APT-C-26"; a.k.a. "GROUP 77"; a.k.a. "GUARDIANS OF PEACE"; a.k.a. "HIDDEN COBRA"; a.k.a. "OFFICE 91"; a.k.a. "RED DOT"; a.k.a. "TEMP.HERMIT"; a.k.a. "THE NEW ROMANTIC CYBER ARMY TEAM"; a.k.a. "WHOIS HACKING TEAM"; a.k.a. "ZINC"), Potonggang District...

[2] "Lazarus Group | InsightIDR Documentation". Rapid7. Rapid7. Andariel, Appleworm, APT-C-26, APT38, Bluenoroff, Bureau 121, COVELLITE, Dark Seoul, GOP, Group 77, Guardian of Peace, Guardians of Peace, Hastati Group, HIDDEN COBRA, Labyrinth Chollima, Lazarus, NewRomantic Cyber Army Team, NICKEL ACADEMY, Operation AppleJesus, Operation DarkSeoul, Operation GhostSecret, Operation Troy, Silent Chollima, Subgroup: Andariel, Subgroup: Bluenoroff, Unit 121, Whois Hacking Team, WHOis Team, ZINC

[3] "NICKEL ACADEMY | Secureworks". secureworks.com. Black Artemis (PWC), COVELLITE (Dragos), CTG-2460 (SCWX CTU), Dark Seoul, Guardians of Peace, HIDDEN COBRA (U.S. Government), High Anonymous, Labyrinth Chollima (CrowdStrike), New Romanic Cyber Army Team, NNPT Group, The Lazarus Group, Who Am I?, Whois Team, ZINC (Microsoft)

[CERT2017-4] "HIDDEN COBRA – North Korea's DDoS Botnet Infrastructure | CISA". us-cert.cisa.gov. CISA. 2017.

[MITRE-5] "Lazarus Group, HIDDEN COBRA, Guardians of Peace, ZINC, NICKEL ACADEMY, Group G0032 | MITRE ATT&CK®". MITRE ATT&CK. MITRE Corporation.

[6] "Microsoft and Facebook disrupt ZINC malware attack to protect customers and the internet from ongoing cyberthreats". Microsoft on the Issues (in Engels (VSA)). 19 Desember 2017. Besoek op 16 Augustus 2019.

[7] "FBI thwarts Lazarus-linked North Korean surveillance malware". IT PRO (in Engels). Besoek op 16 Augustus 2019.

[recorded-8] Guerrero-Saade, Juan Andres; Moriuchi, Priscilla (16 Januarie 2018). "North Korea Targeted South Korean Cryptocurrency Users and Exchange in Late 2017 Campaign". Recorded Future. Geargiveer vanaf die oorspronklike op 16 Januarie 2018.

[9] "Who is Lazarus? North Korea's Newest Cybercrime Collective". www.cyberpolicy.com. Besoek op 26 Augustus 2020.

[10] Beedham, Matthew (9 Januarie 2020). "North Korean hacker group Lazarus is using Telegram to steal cryptocurrency". Hard Fork | The Next Web (in Engels (VSA)). Besoek op 26 Augustus 2020.

[11] "PARK JIN HYOK". Federal Bureau of Investigation (in Engels (VSA)). Besoek op 26 Augustus 2020.

[:6-12] "Drugs, arms, and terror: A high-profile defector on Kim's North Korea". BBC News (in Engels (VK)). 10 Oktober 2021. Besoek op 11 Oktober 2021.

[13] ttps://www.youtube.com/watch?v=8Wv9kgckctU, Unterschätzen wir Nordkorea? - Was hinter der "Lazarus" Hackergruppe steckt, Galileo, ProSieben, 2022-01-06

[1]

[2]

[3]

[4]

[5]

[6]

[7]

[8]

[9]

[10]

[11]

[12]

[13]