Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Nation-State Actor’s Arsenal: An In-Depth Look at Lazarus’ ScoringMathTea
Threat Actors
Malware Families
Excerpt
In October 2025 , the ESET Research Team published an excellent article about the identification of a new instance of the Operation DreamJob cyberespionage campaign, conducted by the Lazarus APT Group , aligned with the North Korean government. This instance was identified by ESET as Gotta Fly , as it was determined that Lazarus was directing cyberattacks with an espionage focus to steal know-how related to the production of Unmanned Aerial Vehicles from companies that are…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Attack Flow6 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | d66ae38be618d0654d375986a41202b1441b5030 | Medium | Score 55/100 | First seen |
IOC Relationship Graph
Building graph…