A North Korean hacking group that is working under APT38 / Lazarus.

---

HIDDEN COBRA is an advanced persistent threat (APT) group that has been active since at least 2016 and targets various industries, including finance, defense, aerospace, and media companies. The group uses sophisticated tactics such as spear-phishing emails, watering hole attacks, and malware to gain access to their target\'s networks and steal sensitive information. HIDDEN COBRA is believed to be affiliated with the North Korean government and has been linked to several high-profile cyberattacks on organizations such as Sony Pictures Entertainment in 2014 and Bangladesh Bank in 2016.

Techniques, tactics and practices:

HIDDEN COBRA uses a variety of sophisticated techniques to gain access to their target\'s networks. Some examples include spear-phishing emails, watering hole attacks, and malware such as the \"Trojan\" or \"Ransomware\". They also use social engineering tactics to trick users into giving them sensitive information through fake websites or phishing scams. Additionally, they have been known to exploit vulnerabilities in software systems and use advanced encryption techniques to hide their activities from detection by security tools.