Threat Intelligence / Actor / Multiple (Lazarus Group, Unknown — SANDWORM_MODE, Unknown — GhostAction)

Multiple (Lazarus Group, Unknown — SANDWORM_MODE, Unknown — GhostAction)

Nation: North Korea (Lazarus), Unknown (others) · 1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: Lazarus Group, APT38, Hidden Cobra, Zinc, Diamond Sleet, SANDWORM_MODE operators, GhostAction operators, s1ngularity operators

Tracked threats

Supply Chain Attacks on Crypto Ecosystem via Developer Toolchain Compromise — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence