Threat Assessment: North Korean Threat Groups

This Unit 42 threat assessment analyzes North Korean Reconnaissance General Bureau (RGB) threat groups (commonly referenced as Lazarus) and ten recently observed malware families across macOS, Linux, and Windows, describing their behaviors, infection chains (including supply‑chain compromises), associated indicators of compromise (hashes, domains, IPs), and recommended mitigations with Palo Alto Networks Cortex XDR and related services.