Nex Systems
Organization

Lazarus Group

Financial crime

North Korea. Named in 11 sanctions listings.

Screen this subject

Summary

North Korean Cybercrime group, which is controlled by the Reconnaissance General Bureau (KPe.031) and linked to APT38.

North Korean cybercrime group controlled by the Reconnaissance General Bureau (RGB; KPe.031).

North Korean cybercrime group controlled by the Reconnaissance General Bureau (RGB. KPe.031). "According to a cybersecurity firm, “Stonefly is believed to specialize in mounting highly selective targeted attacks against targets that could yield intelligence to assist strategically important sectors such as energy, aerospace, and military equipment. Virtually all of the technologies it appears to be interested in have military as well as civilian uses and some could have applications in the development of advanced weaponry”."

0x35fB6f6DB4fb05e6A4cE86f2C93691425626d4b1；

暗号資産アドレス：

According to Annex 59 of the UN Panel of Experts March 2024 Report, the DPRK cyber actors BlueNoroff and TA444 have overlaps.

0x3e37627dEAA754090fBFbb8bd226c1CE66D255e9；

0x53b6936513e738f44FB50d2b9476730C0Ab3Bfc1；

0x08723392Ed15743cc38513C4925f5e6be5c17243；

0x3Cffd56B47B7b41c56258D9C7731ABaDc360E073；

According to Footnote 110 (p. 50) of the UN Panel of Experts March 2019 report, Lab 110 could be the same organization as Lazarus Group: "The United States stated that Chosun Expo is “a front company affiliated with Lab 110, one of the North Korean government’s hacking organizations. That hacking group is what some private cybersecurity researchers have labeled the “Lazarus Group.”".

0xa0e1c89Ef1a489c9C7dE96311eD5Ce5D32c20E4B；

0xF7B31119c2682c88d88D455dBb9d5932c65Cf1bE；

0x098B716B8Aaf21512996dC57EB0615e2383E2f96；

Sanctions and listings11

  • Democratic People's Republic Of Korea (North Korea) Sanctions Regime - Autonomous (DPRK)

    Department of Foreign Affairs and TradeAustralian Sanctions Consolidated ListAustralia

    Targeted financial sanction

    Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Democratic People’s Republic of Korea) Amendment (No. 1) Instrument 2025

    Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Democratic People’s Republic of Korea) List 2012

    Programme AU-DPRKLast updated 6 Nov 2025dfat.gov.audfat.gov.au

  • Listed
    20 Sep 2019
    Effective
    13 Sep 2019

    Reciprocal

    OFACUS SAM Procurement ExclusionsUnited StatesActive

    Prohibition/Restriction

    Redacted for Security Reasons

    sam.gov

  • Democratic People's Republic Of Korea (North Korea) Sanctions Regime - Autonomous (DPRK)

    Department of Foreign Affairs and TradeAustralian Sanctions Consolidated ListAustralia

    Targeted financial sanction

    Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Democratic People’s Republic of Korea) Amendment (No. 1) Instrument 2025

    Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Democratic People’s Republic of Korea) List 2012

    Programme AU-DPRKLast updated 6 Nov 2025dfat.gov.audfat.gov.au

  • Effective
    1 Sep 2023

    国際平和のための国際的な努力に我が国として寄与するために講ずる資産凍結等の措置の対象となる

    Ministry of FinanceJapan Economic Sanctions and List of Eligible PeopleJapan

    Reference 70mof.go.jp

  • Listed
    13 Sep 2019

    North Korea Sanctions - DPRK3

    Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States

    DPRK3 and block

    Secondary sanctions risk: North Korea Sanctions Regulations, sections 510.201 and 510.210

    Transactions Prohibited For Persons Owned or Controlled By U.S. Financial Institutions: North Korea Sanctions Regulations section 510.214

    Executive Order 13722 (North Korea)

    Programme US-NKReference 27307treasury.govofac.treasury.gov

  • Listed
    13 Sep 2019

    North Korea Sanctions - DPRK3

    Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States

    DPRK3 and block

    Secondary sanctions risk: North Korea Sanctions Regulations, sections 510.201 and 510.210

    Transactions Prohibited For Persons Owned or Controlled By U.S. Financial Institutions: North Korea Sanctions Regulations section 510.214

    Executive Order 13722 (North Korea)

    Programme US-NKReference 27309treasury.govofac.treasury.gov

  • Listed
    13 Sep 2019

    North Korea Sanctions - DPRK3

    Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States

    DPRK3 and block

    Secondary sanctions risk: North Korea Sanctions Regulations, sections 510.201 and 510.210

    Transactions Prohibited For Persons Owned or Controlled By U.S. Financial Institutions: North Korea Sanctions Regulations section 510.214

    Executive Order 13722 (North Korea)

    Programme US-NKReference 27308treasury.govofac.treasury.gov

  • Listed
    20 Sep 2019
    Effective
    13 Sep 2019

    Reciprocal

    OFACUS SAM Procurement ExclusionsUnited StatesActive

    Prohibition/Restriction

    Redacted for Security Reasons

    sam.gov

  • Effective
    2 Dec 2022

    国際平和のための国際的な努力に我が国として寄与するために講ずる資産凍結等の措置の対象となる

    Ministry of FinanceJapan Economic Sanctions and List of Eligible PeopleJapan

    Reference 68mof.go.jp

  • Effective
    1 Sep 2023

    国際平和のための国際的な努力に我が国として寄与するために講ずる資産凍結等の措置の対象となる

    Ministry of FinanceJapan Economic Sanctions and List of Eligible PeopleJapan

    Reference 69mof.go.jp

  • Listed
    20 Sep 2019
    Effective
    13 Sep 2019

    Reciprocal

    OFACUS SAM Procurement ExclusionsUnited StatesActive

    Prohibition/Restriction

    Redacted for Security Reasons

    sam.gov

Connections21

Members and officers1

  • Jin Hyok PAKSanctionedDebarredExport controlled
    Member
    Born 18 Oct 1984North Korea

Other links20

  • OrganizationReconnaissance General BureauSanctionedDebarredExport controlled
    Linked from
    "The Reconnaissance General Bureau oversees all North Korean cybercrime activities"North Korea
  • PersonHuihui WuSanctionedDebarredExport controlled
    Linked from
    "Providing support to"Born 15 Dec 1988China
  • OrganizationReconnaissance General BureauSanctionedDebarredExport controlled
    Linked from
    "The Reconnaissance General Bureau oversees all North Korean cybercrime activities"North Korea
  • OrganizationJMT Trader
    Linked from
    "Linked"
  • OrganizationUNC 4899
    Linked from
    "The entities have "overlaps""North Korea
  • OrganizationReconnaissance General BureauSanctionedDebarredExport controlled
    Linked from
    "The Reconnaissance General Bureau oversees all North Korean cybercrime activities, Lazarus group included"North Korea

Other names33

Also known as19

Jumpy PiscesStoneflyAPT 45Guardians of Peace； The New Romantic Cyber Army Team； Whois Hacking Team； Red Dot； Temp.Hermit； Group 77； Zinc； APT-C-26； ApplewormDarkSeoulヒドゥン・コブラ；オフィス９１；ガーディアンズ・オブ・ピース；ザ・ニュー・ロマンティック・サイバー・アーミー・チーム；フーイズ・ハッキング・チーム；レッド・ドット；テンプ・ハーミット；グループ７７；ジンク；エー・ピー・ティー・シー２６；アップルワームSilent ChollimaWHOIS HACKING TEAMClasiopaBlueNoroffTHE NEW ROMANTIC CYBER ARMY TEAMスターダスト・チョルリマ；エー・ピー・ティー３８Whois TeamOnyx Sleetアンダリエルラザルス・グループBluenoroffブルーノロフ
Show 1 more
Andariel

Weak aliases14

Spellings the source flags as too generic to establish a match on their own.

The New Romantic Cyber Army TeamAPT 38WhoIs Hacking TeamRed DotZincAPT38Office 91TEMP.HermitHidden CobraAPT-C-26ApplewormStardust ChollimaGuardians of PeaceGroup 77

Addresses6

  • Korea, North

  • Potonggang District, Pyongyang, Democratic People's Republic of Korea

  • POTONGGANG DISTRICT, PYONGYANG

  • Potonggang District Pyongyang Korea, North

  • 北朝鮮平壌特別市普通江区域

  • Democratic People's Republic of Korea

This page shows the public record as its publishers state it. A name here is not by itself a finding: whether a record refers to a particular person or company is what screening decides. Read the full notice.