Taiwan Heist: Lazarus Tools and Ransomware
ID: 8ec43ed3-daa6-40be-802d-1b58bb517826
STIX ID: report--8ec43ed3-daa6-40be-802d-1b58bb517826
Threat Score
85/100
Uploaded: 2026-08-15
Published Date: 2017-10-17
Last Modified Date: 2017-10-17
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
This BAE Systems blog post analyzes a sophisticated cyber-enabled bank heist against Taiwan's Far Eastern International Bank, linking Lazarus-group tooling and a Hermes ransomware variant used possibly as a smokescreen. It provides detailed malware analyses (loader/spreader, backdoor, service DLL, Hermes ransomware), sample metadata and IOCs, SWIFT transaction analysis showing fraudulent MT103/MT202COV activity, and defensive recommendations for financial institutions.
