The threat actor is using a sophisticated network of VPNs and proxies to centrally manage command and control servers from Pyongyang.
Researchers Uncover Lazarus Group Admin Layer for C2 Servers

The threat actor is using a sophisticated network of VPNs and proxies to centrally manage command and control servers from Pyongyang.