Russian and North Korean Hackers Form Alliances to Attack Organizations Worldwide

A GenDigital report documents evidence that Russian-aligned Gamaredon and North Korea’s Lazarus group appear to be sharing a server (144.172.112.106) used both for Gamaredon C2 activity and hosting an obfuscated InvisibleFerret payload tied to Lazarus (SHA256:128da9...). The overlap — if confirmed — would be the first observed Russian–North Korean cyber collaboration, increasing risk from coordinated nation-state operations and prompting recommendations for enhanced infrastructure correlation and intelligence sharing.