Search OpenSanctions

Advanced

Lazarus Group

TypeOrganization[sources]
NameLazarus Group[sources]
Other nameGuardians of Peace · Hidden Cobra · Whois Team · Zinc[sources]
Legal formnot available[sources]
CountryNorth Korea[sources]
DescriptionNorth Korean cybercrime group controlled by the Reconnaissance General Bureau (RGB; KPe.031).[sources]
Statusnot available[sources]
Source linkwww.nknews.org[sources]
Last changeLast processedFirst seen

Descriptions

According to Footnote 110 (p. 50) of the UN Panel of Experts March 2019 report, Lab 110 could be the same organization as Lazarus Group: "The United States stated that Chosun Expo is “a front company affiliated with Lab 110, one of the North Korean government’s hacking organizations. That hacking group is what some private cybersecurity researchers have labeled the “Lazarus Group.”".

DPRK Reports non-official source,

Relationships

Linked from
SubjectRoleStart dateEnd date
Stardust ChollimaBlueNoroff (Stardust Chollima) is a subgroup of the Lazarus Group--
Third Bureau of the Reconnaissance General BureauThe Lazarus Group is reported to be included in the Third Bureau of the Reconnaissance General Bureau--
Celas Ltd.Celas is a fake shell company backed by the Lazarus group--
Kim Hyon WooKim Hyon Woo is a fake persona used by the Lazarus Group--
UNC 4899The entities have "overlaps"--
Reconnaissance General Bureau Sanctioned entityThe Reconnaissance General Bureau oversees all North Korean cybercrime activities, Lazarus group included--
JMT TraderLinked--
Linked to
ObjectRoleStart dateEnd date
AndarielAndariel is a subgroup of Lazarus--
110 Research Institute of the Reconnaissance General BureauLarazus Group is working with or on behalf of the 110 Research Institute--
Members
MemberRoleStart dateEnd date
Park Jin HyokMember--

Data sources

DPRK Reports5,519

A database of entities and events related to North Korea's sanctions evasion efforts.

United Kingdom · RUSI · non-official source


For experts: raw data explorer