According to cybersecurity firm Volexity, Lazarus’s Bloxholder campaign began in June and was running as recently as October.
The FBI and the Cybersecurity and Infrastructure Security Agency jointly warned last year that Lazarus had been using AppleJeus in crypto and digital asset theft operations since 2018 or earlier.