Lazarus Group / APT38
CriticalState-linked group known for attacks on SWIFT-connected banks, including the 2016 attack on Bangladesh Bank. Current campaigns use fake job offers and malicious packages against finance staff.
11 of 14 mapped techniques detected
Espionage group reported targeting South Asian government bodies, including in Bangladesh, with spear-phishing and document exploits.
8 of 10 mapped techniques detected
Long-running espionage group in South Asia using malicious documents and look-alike domains.
7 of 9 mapped techniques detected
Ransomware affiliates
HighFinancially motivated groups using stolen VPN credentials and exposed services, then data theft before encryption.
12 of 15 mapped techniques detected
Credential-stuffing crews
MediumCommodity operators replaying leaked passwords against bank and portal sign-ins from hosting networks.
fully covered by edge and identity controls