Netskope Threat Labs

BlueNoroff

ATP Sandbox Adv. Heuristics

BlueNoroff is a malware toolkit used for SWIFT manipulation by the North Korean Lazarus activity cluster of the same name, whose campaigns target financial institutions to enable fraudulent transfers.

First seen
April 2022
Last seen
September 2026
Alert Name
Script-WScript.Trojan.BlueNoroff
Shortcut.Trojan.BlueNoroff
Win32.Trojan.BlueNoroff
Win64.Trojan.BlueNoroff