Webinar Description
Key Takeaways
- Joint research from Sekoia and Kudelski Security examining North Korea’s cyber operations structure
- Analysis of how the Lazarus group has fragmented into six distinct sub-clusters
- Designed for threat intelligence analysts, incident responders, CISOs and security researchers
- Covers recruitment pipelines, training institutions and money laundering mechanisms
- Addresses attribution challenges posed by constant organizational restructuring
About the Webinar
Beyond Lazarus: Organization of DPRK cyber capabilities is a 45-minute threat intelligence webinar co-hosted by Sekoia and Kudelski Security. The session presents original joint research examining how North Korea has restructured its cyber operations, with particular focus on the evolution of the Lazarus group from a single entity into multiple specialized sub-clusters.
North Korean Cyber Operations Structure
The webinar examines the organizational framework behind North Korea’s state-sponsored cyber activities, which serve three primary objectives: generating state revenue, conducting espionage and executing sabotage operations. Presenters will detail the breakdown of the Lazarus group into six sub-clusters, explaining how this fragmentation complicates threat attribution efforts.
Additional topics include the recruitment and training of North Korean IT workers, their deployment abroad, the role of international ties with China and Russia, and the channels used to launder proceeds from cybercrime operations.
Who Should Attend
This webinar is intended for cybersecurity professionals working in threat intelligence, incident response and security research. It is particularly relevant for CISOs and security decision-makers in financial services, government and critical infrastructure sectors who need to understand nation-state threat actors. The session includes a live Q&A for attendees to engage directly with the researchers.