v2 → v3
Scores
trust_score0 → 0
severity_base— → —
score_modifier-12 → -12
Sections
Attribution and Background → Attribution and Threat Actor Background
unchanged
Campaign Discovery and Research Attribution → Discovery and Public Disclosure
unchanged
Attack Vector — ClickFix Social Engineering → Delivery Vector — ClickFix Social Engineering
unchanged
Malware Architecture and Technical Analysis → Malware Architecture and Attack Chain
unchanged
Indicators of Compromise → Evasion and Detection Difficulty
unchanged
Target Profile → Indicators of Compromise
unchanged
Financial Damages and Concurrent Attacks → Operational Security Failures
unchanged
Evasion, Self-Deletion, and Detection Difficulty → Target Profile
unchanged
Operational Security Failures and Researcher Counter-Intelligence → Linked Exploit: Drift Protocol (April 2026)
unchanged
Broader Campaign Context and Secondary Adoption → Linked Exploit: KelpDAO Bridge (April 2026)
unchanged
Detection and Mitigation Guidance → Scale of Lazarus Cryptocurrency Theft
unchanged
Regulatory and Sanctions Context → Sanctions and Regulatory Status
unchanged
(section 13) → Secondary Adoption and Related Campaigns
unchanged
(section 14) → MITRE ATT&CK Mapping, Detection and Mitigation
unchanged
Timeline events
+ added2007 — (no description)
+ added2019-09 — (no description)
+ added2020-03 — (no description)
+ added2020-08 — (no description)
+ added2022-04 — (no description)
+ added2022-05 — (no description)
+ added2025 — (no description)
+ added2025-09 — (no description)
+ added2026-05 — (no description)
+ added2026-06 — (no description)
- removed2022-04-14 — (no description)
- removed2026-04-18 — (no description)
- removed2026-04-21 — (no description)
- removed2026-04-22 — (no description)
- removed2026-06-09 — (no description)
~ changed2026-04: “” → “”
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v2 hash: 4abcaa127a64ac59405a887c1a1f13bfc19ad845b856038e5ab2b8efd2efece9
v3 hash: ed80fa8a957e698e5905dd5ef25a5d159e6661f696afaaca81429801f07ed032