Lazarus II: North Korea's 227 Cyber Research Centre Poses a Threat to India

Lazarus Group consistently features as a top threat in Indian cybersecurity reports. Directly linked to the North Korean state, the group has a documented history of targeting India.

- BRIJESH SINGH

A new frontline: Pyongyang's Digital Offensive The name "Lazarus Group" is a source of alarm for cybersecurity experts globally. For years, this North Korean state-sponsored entity operated in the shadows, targeting international banks and technology firms. Now, these hackers have significantly advanced their methods, and India, with its rapidly expanding digital economy, is facing the consequences directly. The threat is no longer distant; it has arrived at the nation's digital doorstep.

At the core of this escalating cyber offensive is North Korea's 227 Research Centre, a secretive unit reportedly using artificial intelligence to broaden the scope and effectiveness of its hacking operations. For India, this threat can no longer be ignored. From individual bank accounts and digital wallets to critical government infrastructure, North Korean hackers are actively targeting Indian assets, leaving behind a trail of financial losses and data breaches.

The 227 Research Centre: Warfare for the Digital Age Earlier this year, North Korean leader Kim Jong Un is reported to have ordered the establishment of the 227 Research Centre within the country's formidable Reconnaissance General Bureau (RGB). Its mission is to pioneer 24/7 AI-enhanced hacking, staffed by a dedicated team of approximately 90 highly skilled experts. This represents a strategic shift towards arming elite digital operatives with intelligent systems that can learn, adapt, and execute attacks with unprecedented speed and scale.

The centre's explicit focus on artificial intelligence is what makes it particularly dangerous. Pyongyang is moving beyond conventional malware, which can often be detected by security systems, and is now integrating AI with its traditional hacking strategies. This allows for the automation of attacks that can modify their behaviour in real-time to evade advanced cyber defences and outmanoeuvre human security analysts.