logo

Taiwan Heist: Lazarus Tools and Ransomware

ID: 8ec43ed3-daa6-40be-802d-1b58bb517826

STIX ID: report--8ec43ed3-daa6-40be-802d-1b58bb517826

Threat Score

85/100

Uploaded: 2026-08-15

Published Date: 2017-10-17

Last Modified Date: 2017-10-17

Created by: dogesec

TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
This BAE Systems blog post analyzes a sophisticated cyber-enabled bank heist against Taiwan's Far Eastern International Bank, linking Lazarus-group tooling and a Hermes ransomware variant used possibly as a smokescreen. It provides detailed malware analyses (loader/spreader, backdoor, service DLL, Hermes ransomware), sample metadata and IOCs, SWIFT transaction analysis showing fraudulent MT103/MT202COV activity, and defensive recommendations for financial institutions.