29 November 2025

Russian and North Korean Hackers Forge Global Cyberattack Alliance

Mayura Kathir

State-sponsored hackers from Russia and North Korea are collaborating on shared infrastructure, marking a significant shift in cyber geopolitics.

Security researchers have uncovered evidence suggesting that Gamaredon, a Russia-aligned advanced persistent threat (APT) group, and Lazarus, North Korea’s primary cyber warfare unit, may be operating jointly a development with profound implications for global security.

Russia and North Korea’s partnership extends well beyond traditional military cooperation. Moscow backed Pyongyang during the Korean War, and in 2024, both nations formalized their alliance through a Comprehensive Strategic Partnership featuring mutual defense commitments.

Since Russia invaded Ukraine in 2022, North Korea has supplied munitions and troops to support Moscow’s military efforts. This ground-level cooperation now appears to have a digital equivalent.

On July 28, 2025, security monitoring systems detected suspicious activity linking Gamaredon and Lazarus through a shared IP address, suggesting operational-level coordination between the two state-backed actors.

No comments: