actors/lazarus-group.htmlNews mentioning Lazarus GroupMon, 19 Oct 2026 12:28:44 GMT https://objective-see.org/blog/blog_0x57.htmlmaxdzcSun, 18 Oct 2026 21:00:39 GMTObjective-See. A sophisticated Lazarus Group implant has arrived on macOS. In this post, we deconstruct the Mac variant of a OSX.Dacls, detailing its install logic, persistence, and capabilities.ResearchMalwareAPT https://objective-see.org/blog/blog_0x54.html16vr7j3Sun, 18 Oct 2026 21:00:39 GMTObjective-See. The Lazarus group's latest implant/loader supports in-memory loading of 2nd-stage payloads. In this post we describe exactly how to repurposing this 1st-stage loader to execute *our* custom 'fileless' payloads!ResearchMalwareAPT https://objective-see.org/blog/blog_0x51.html1f1lzkmSun, 18 Oct 2026 21:00:39 GMTObjective-See. The rather infamous APT group, "Lazarus", continues to evolve their macOS capabilities. Today, we tear apart their latest 1st-stage implant that supports remote download & in-memory execution of secondary payloads!ResearchAPT https://objective-see.org/blog/blog_0x49.html1ayob0xSun, 18 Oct 2026 21:00:39 GMTObjective-See. A new macOS backdoor written by the infamous Lazarus APT group needs analyzing. Here, we examine it's infection vector, method of persistence, capabilities, and more!ResearchAPT https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/y4a9scWed, 14 Oct 2026 19:41:43 GMTBleepingComputer. The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]Law & policyAPT https://cybersecuritynews.com/famous-chollima/1mk0reqWed, 14 Oct 2026 12:37:23 GMTCybersecurity News. The FBI disrupted several U.S. laptop farms used by North Korean threat group FAMOUS CHOLLIMA in late September 2026, cutting off infrastructure that helped fake remote workers enter American companies. CrowdStrike disclosed the joint operation on October 13,…APTLaw & policy https://www.crowdstrike.com/en-us/blog/fbi-disrupts-famous-chollima-operation-with-crowdstrike-assistance/15j2jc4Tue, 13 Oct 2026 05:00:00 GMTCrowdStrike. ResearchAPT https://www.zscaler.com/blogs/security-research/suspected-tradertraitor-group-uses-trojanized-terraform-provider-deliverkl16kfThu, 08 Oct 2026 19:49:04 GMTZscaler ThreatLabz. IntroductionIn July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor backed by the North Korean government that has targeted…ResearchAPTMalware https://securityaffairs.com/200354/security/security-affairs-malware-newsletter-round-117.html7cv8tmSun, 04 Oct 2026 14:00:02 GMTSecurity Affairs. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Lunex Unmasked: A New Information Stealer Deployed Through BYOVD Storm-3168: Agentic-driven cloud attacks…APTMalware https://opensourcemalware.com/blog/the-opensourcemalwareshow-episode221s2rbd9Fri, 25 Sep 2026 05:00:00 GMTOpenSourceMalware. ShinyHunters attacks FBI, new WeaselBiscuit malware, Contagious Interview research, and dev FAQsResearchRansomwareMalwareAPT