VB2021 paper: Multi-universe of adversary: multiple campaigns of Lazarus group and its connection

This Kaspersky VB2021 paper analyzes the Lazarus Group's multi-cluster operations from 2018–2021, mapping distinct malware clusters (AppleJeus, ThreatNeedle, DeathNote/DreamJob, Bookcode, CookieTime/LCPDot, Manuscript, MATA), their infection vectors, post-exploitation TTPs, C2 architectures, developer fingerprints, victimology (cryptocurrency, defence, software supply-chain, pharmaceutical), and provides sample hashes and indicators to aid attribution and defensive measures.