What Techniques Does the Lazarus Group* Use to Break Security?
summary
Overview of techniques used by the North Korean state-linked Lazarus group in high-impact attacks against banks, media companies, pharma firms and cryptocurrency exchanges, focusing on tactics likely to threaten sole proprietors, SMEs and large corporations in 2025. Covers specific attack methods and tricks at a high level (not low-level technical detail) to raise organizational awareness and help prepare defenses against phishing, malicious attachments, and social-engineering vectors used in recent Lazarus operations.
AI-written summary · about
chapters (23)
- 0:00Lazarus Group intro
- 3:53Cosmos Bank attack
- 7:46Cosmos Bank theft
- 9:54Korean conflict background
- 10:55Dark Seoul attack
- 12:01Sony Pictures hack
- 15:13Lazarus origin
- 17:00Bangladesh Bank theft
- 19:28WannaCry & NSA zero day
- 21:14Lazarus shift to crypto
- 21:36NiceHash theft
- 25:072020 defense attacks
- 28:21Social engineering
- 30:08NFT market attacks
- 33:58Security firm hack
- 37:53Web 3.0 threats
- 41:052024 crypto attacks
- 43:12Bitstamp theft
- 51:37Chainalysis 2024 report
- 55:14Lazarus evolution
- 57:49Humans weakest link
- 59:32Security best practices
- 1:00:18Q&A
related talks
42mHow to Fight the Lazarus Group
55mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
54mmacOS: Tracking High Profile Targeted Attacks, Threat Actors & TTPs
59mInnovation lessons we can learn from hackers
01h 02mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
51mIf It’s Smart, It’s Vulnerable
30mYou Shall Not Pass: Defending Against Ransom DDoS Attacks
37mRansomware Resilience: Holistic Defense for SOC Leaders