The_Lazarus_Constellation.pdf

A technical intelligence study of the Lazarus constellation (North Korean APT) documenting its evolution, motives (esp. financially motivated heists), tooling and tradecraft across 2007–2019; includes detailed malware analyses (SQCSVC, SWPSVC, injectors, keyloggers), encryption and C2 methods (Fake-TLS), exploited CVEs, IOCs, YARA/Snort detection rules, a sample dataset and classification methodology, plus incident response guidance and mitigation recommendations.