Lazarus Group, a hacker group directed from DPRK, known by various unofficial names like Hidden Cobra, ZINC, Diamond Sleet, and Guardian of Peace.
Led by Park Jin-hook, a DPRK citizen involved in software development, very little is known about the organization's size and composition.
Lazarus Group attacks crippled computer systems, stole funds, engaged in a large-scale criminal conspiracy with sophisticated hacking techniques.
Notorious for major attacks including the 2014 Sony Pictures Entertainment hack and the hacking of financial systems like SWIFT for $1 billion.
The group targeted crypto exchanges, stealing around $882 million in assets, and attacked platforms like Axie Infinity and Horizon protocol.
The attack on Bybit exchange in 2025 resulted in the theft of around $1.4 billion worth of Ethereum, attributed to Lazarus Group.
North Korean cybercriminals, including Lazarus Group, are estimated to have stolen around $1.7 billion in a year from various hacks.
The involvement of Lazarus Group in criminal activities affects the credibility of the cryptocurrency industry, leading to sanctions by authorities.
With complex operations linked to state involvement, Lazarus Group is believed to be connected to the DPRK's cybercrime activities and potential nuclear program funding.
Lazarus Group is one of the units in DPRK's cyber operations, operating alongside other groups like Kimsuky and Ricochet Chollima, similar to structures in other non-democratic regimes.
The negative impact of Lazarus Group's actions reflects on the DPRK's image as a totalitarian regime and raises concerns about funding sources for potential mass destruction projects.