U.S. Department of Homeland Security: HOPLIGHT is a new spyware variant called a never-before-seen spyware. The malware is the work of the North Korean government s Hidden Cobra APT (a.k.a. the Lazarus Group), it said. The group also was linked to the infamous 2014 Sony Pictures hack, for instance, as well as the SWIFT banking attacks. 15 different IP addresses have been seen to be associated with the malware infrastructure, according to the warning.
Source: https://threatpost.com/north-koreas-hidden-cobra-strikes-u-s-targets-with-hoplight/143740/