The only in-depth report outlining multiple layers of Lazarus infrastructure,
thorough analysis of hacker’s tools and evidence leading to North Korean IP addresses

http://www.group-ib.com/lazarus.html