Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-21 ⋅ Kaspersky ⋅ Sojun Ryu
Operation FlashHole: Lazarus breaks security, defies control
CLOUDBURST LightlessCan LPEClient TOUCHSHIFT
2025-10-28 ⋅ Kaspersky ⋅ Omar Amin, Sojun Ryu
Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs
2025-04-24 ⋅ Kaspersky ⋅ Sojun Ryu, Vasily Berdnikov
Operation SyncHole: Lazarus APT goes back to the well
Bankshot DRATzarus PostNapTea wAgentTea
2024-12-19 ⋅ Kaspersky Labs ⋅ Sojun Ryu, Vasily Berdnikov
Lazarus group evolves its infection chain with old and new malware
MISTPEN
2021-10-07 ⋅ S2W Inc. ⋅ Jaeki Kim, Kyoung-ju Kwak, Sojun Ryu
Operation Newton: Hi Kimsuky? Did an Apple(seed) really fall on Newton’s head?
Appleseed Kimsuky
2021-07-08 ⋅ Medium s2wlab ⋅ Sojun Ryu
Analysis of Lazarus malware abusing Non-ActiveX Module in South Korea
Racket Downloader
2021-06-23 ⋅ ⋅ Medium s2wlab ⋅ Sojun Ryu
Deep analysis of REvil Ransomware
REvil
2021-05-28 ⋅ Medium s2wlab ⋅ Sojun Ryu
Deep Analysis of Vidar Stealer
Vidar
2021-02-15 ⋅ Medium s2wlab ⋅ Sojun Ryu
Operation SyncTrek
AbaddonPOS Azorult Clop DoppelDridex DoppelPaymer Dridex PwndLocker
2021-01-27 ⋅ S2W LAB Inc. ⋅ Sojun Ryu
How to communicate between RAT infected devices (White paper)
Volgmer
2021-01-27 ⋅ S2W LAB Inc. ⋅ Sojun Ryu
Analysis of THREATNEEDLE C&C Communication (feat. Google TAG Warning to Researchers)
Volgmer