Inside Lazarus: How North Korea uses AI to industrialize attacks on developers

Author(s): Marcus Hutchins
Organization: Expel

Open article directly Open article on Archive.org

2026-07-15 ⋅ Expel ⋅ AARON WALTON
Introducing CylindricalCanine: The GoldenEyeDog subgroup responsible for the April DigiCert incident
Ghost RAT

2026-01-15 ⋅ Expel ⋅ AARON WALTON
Planned failure: Gootloader’s malformed ZIP actually works perfectly
GootLoader

2025-10-31 ⋅ Expel ⋅ AARON WALTON
Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates
Broomstick

Propose Change Inside Lazarus: How North Korea uses AI to industrialize attacks on developers