Lazarus is a hacking group "involved in both cyber crime and espionage," according to Symantec's Security Response Attack Investigation Team, which detailed the alleged ATM exploit. A Department of Homeland Security (DHS) alert from October attributed the ATM attack to "Hidden Cobra," the name the report uses for "malicious cyber activity by the North Korean government." "DHS, Treasury, and FBI identified malware and other indicators of compromise (IOCs) used by the North Korean government in an Automated Teller Machine (ATM) cash-out scheme," the DHS report said. Lazarus has been implicated by cybersecurity firms in high-level cyberattacks, such as the WannaCry ransomware attack, the 2016 theft of $81 million from the central bank of Bangladesh, and the 2014 Sony information leak that exposed Sony account holders' information to theft, reported The Verge.