Threat intel package for Lazarus Group's 3-wave GitHub phishing campaign targeting developers (Mar-Apr 2026). YARA, Sigma, Suricata, Nuclei rules + STIX 2.1 bundle + ATT&CK Navigator layer + full C2 infrastructure map. Defensive use only.
ioc apt phishing suricata nuclei stix sigma yara dprk threat-intelligence detection-rules mitre-attack supply-chain-security developer-security npm-security lazarus-group contagious-interview
-
Updated
Apr 9, 2026 - Python