logo

Stealing the LIGHTSHOW (Campaign)

ID: 99bb18a9-baff-51c0-84a1-cfb6067bb3cc

STIX ID: report--99bb18a9-baff-51c0-84a1-cfb6067bb3cc

Feed Name: Wiz Cloud Threat Landscape

Threat Score
85/100

Date Published: 2023-03-09

Date Updated: 2026-05-01

Author: [email protected] (Wiz Threat Research)

...
...

Links to Mandiant blog posts describing UNC2970 (a North Korea-associated APT) and related campaigns named LightShow and LightShift; the referenced reports cover the group's campaigns, tools, tactics, and observed indicators of compromise.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.