Inside Lazarus: How North Korea uses AI to industrialize attacks on developers

Author(s): Marcus Hutchins
Organization: Expel

Open article directly Open article on Archive.org

2026-01-15 ⋅ Expel ⋅ AARON WALTON
Planned failure: Gootloader’s malformed ZIP actually works perfectly
GootLoader

2025-10-31 ⋅ Expel ⋅ AARON WALTON
Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates
Broomstick

2025-09-11 ⋅ Expel ⋅ AARON WALTON, Cert Central
The history of AppSuite: the certs of the BaoLoader developer
BaoLoader

Propose Change Inside Lazarus: How North Korea uses AI to industrialize attacks on developers