Introduction The Lazarus Group, believed to be affiliated with the North Korean government, has become one of the most notorious cyber attack groups in recent years. With a significant reputation for sophisticated cyber espionage and theft, documenting their activities has grown increasingly important as their reach expands globally. Recent events have highlighted their evolving tactics,