LAZARUS GROUP

Alternate names (AKA)

• HIDDEN COBRA
• Guardians of Peace

Remarks

North Korean state-sponsored cyber threat actor

Designation context

LAZARUS GROUP appears on the OFAC SDN sanctions list, designated under the programs DPRK3, CYBER2. Associated jurisdiction: KP.

Designations on these lists carry legal weight in the relevant jurisdiction: US persons (OFAC SDN), UN member states (UN 1267), and EU member states (EU Consolidated) are generally prohibited from dealing with listed parties without a specific licence. Parties designated across multiple lists may face compounding restrictions. This page is a reference index — for authoritative text of the designation, consult the source list directly.

What sanctions designation means

Listing on a sanctions roster typically triggers: asset freezes in the designating jurisdiction, prohibition on financial transactions with US/EU/UN-linked counterparties, travel restrictions for individuals, and secondary-sanctions risk for third parties doing business with the listed party.

Each program has its own scope. SDGT covers Specially Designated Global Terrorists. RUSSIA-EO14024 covers sanctions imposed in response to Russia's 2022 invasion of Ukraine. CYBER2 covers significant malicious cyber-enabled activities. DPRK and related codes cover North Korea WMD and human rights programs. IRAN-HR covers Iran human rights. Consult OFAC's program index for authoritative program definitions.