Lazarus Group

Also known as TraderTraitor, APT38, BlueNoroff

The US government attributes WannaCry and the largest cryptocurrency thefts on record to hackers working for North Korea, raising money for the state.

What it is
State-sponsored
Based
North Korea, per the FBI
Active
2009–
Status
Active; sanctioned

On the record

  1. Feb 2025 · FBI IC3

    FBI says North Korea is responsible for the $1.5 billion theft from Bybit
  2. Apr 2022 · BleepingComputer

    FBI links the $620 million Ronin bridge theft to Lazarus
  3. Oct 2018 · Infosecurity Magazine

    Government puts the cost of WannaCry to the NHS at £92 million

In the ledger

One outage listed

  • May 2017WannaCry: £92 million to the NHS. Department of Health and Social Care estimate; 19,000 appointments were cancelled.
A red Deutsche Bahn ticket machine whose screen shows a blue startup screen instead of the ticket menu
A Deutsche Bahn ticket machine at Munich Hauptbahnhof on 14 May 2017, the weekend WannaCry reached the railway’s systems. Photo: Freddy2001, CC BY-SA 3.0.