Researchers Expose Lazarus Recruitment Pipeline Live on Camera Through Honeypot Operation

**Investigative overview:** Researchers from BCA LTD, ANYRUN, and NorthScan infiltrated a Lazarus Group recruitment pipeline and captured live activity showing how operators use fake hiring and recruited insiders to gain access to target organizations and conduct a multi-stage Chollima attack cycle, revealing tooling, operational security practices, and an evolution toward employment-based access vectors.