Nknews

North Korea and Russia Collaborate in Cyber Operations

First seen 24 Nov 2025, 09:25 UTC • Mezha

•83% similarity •39.7

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

North Korea's Lazarus Group and Russia's Gamaredon have reportedly begun collaborating in cyber operations, marking the first known instance of such cooperation. Researchers from Gen Digital indicate that the two groups may be sharing infrastructure and resources, suggesting a significant escalation in their cyber activities.

ThreatCluster AI

Attack Flow

9 entities, 18 inferred relationships (STIX 2.1).

Threat Actor (3)

Gamaredon
Lazarus
Lazarus Group

Technique (2)

Malware
T1071 - Command And Control

Campaign (2)

Contagious Interview
ContagiousInterview

Malware (1)

InvisibleFerret

Affected Platform (1)

Relationships

Gamaredon uses InvisibleFerret
Lazarus uses InvisibleFerret
Lazarus Group uses InvisibleFerret
Gamaredon uses Malware
Gamaredon uses T1071 - Command And Control
Lazarus uses Malware
Lazarus uses T1071 - Command And Control
Lazarus Group uses Malware
Lazarus Group uses T1071 - Command And Control
Contagious Interview attributed to Gamaredon
Contagious Interview attributed to Lazarus
Contagious Interview attributed to Lazarus Group
ContagiousInterview attributed to Gamaredon
ContagiousInterview attributed to Lazarus
ContagiousInterview attributed to Lazarus Group
Contagious Interview uses InvisibleFerret
ContagiousInterview uses InvisibleFerret
Gamaredon related to Telegram

Community

Browse all →

North Korea and Russia Collaborate in Cyber Operations

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading