Threat Intelligence / Actor / Suspected DPRK (DeceptiveDevelopment / Lazarus-adjacent cluster)

Suspected DPRK (DeceptiveDevelopment / Lazarus-adjacent cluster)

Nation: North Korea · 1 tracked threat(s) · Categories: MALWARE

Also known as: DeceptiveDevelopment, DEV#POPPER, Operation DreamJob adjacent, Lazarus Group (suspected overlap)

Tracked threats

Omnistealer: DPRK-Linked Blockchain-Based Infostealer Abusing TRON/Aptos/BSC as Resilient C2 to Loot Password Managers, Browser Credentials, Cloud Storage, and 60+ Crypto Wallets — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence