Home
Glossary
Bluenoroff
Table of content
5 min
H2 title on one or more lines.
Share
By
Updated on
June 22, 2026

Bluenoroff

Bluenoroff is a North Korean state-sponsored advanced persistent threat group believed to be a subgroup of the Lazarus Group, also known as Hidden Cobra.

Bluenoroff is a North Korean state-sponsored advanced persistent threat (APT) group. It is believed to be a subgroup of the Lazarus Group, which is also known as Hidden Cobra. Bluenoroff is primarily focused on financial gain rather than traditional espionage. The group has been linked to a series of financially motivated cyber attacks against banks, cryptocurrency exchanges, and other financial institutions worldwide.

The group is known for conducting highly sophisticated cyber operations, often involving the development and deployment of custom malware. For instance, Bluenoroff has been associated with the DPRK delicate sound of cyber campaigns, and has been involved in the distribution of the RustBucket malware, targeting macOS systems.

We are a cybersecurity software publisher. We provide SOC and MSSP teams with a turnkey operational security platform (SOC platform). Through our XDR platform, CTI tool and threat intelligence platform, we enable our users to neutralize cyber threats, regardless of the attack surface.