Lazarus_Group__2018__rpt-apt38-2018-web_v4.pdf

This FireEye report profiles APT38, a North Korean regime‑backed, financially motivated APT that targets banks and inter‑bank systems (notably SWIFT) to steal funds and conceal theft using custom malware and destructive wipers; it details the group's mission, global targeting, six‑stage heist methodology, timelines, shared infrastructure with other DPRK operations, and a technical annex enumerating malware families and detections.