APT / THREAT GROUP

AppleJeus

aliases

Last seen:May 19, 2026

Intelligence Profile

According to PcRisk AppleJeus is the name of backdoor malware that was distributed by the Lazarus group. They spread this malicious software through a fake app disguised as a cryptocurrency trading application called Celas Trade Pro.

Threat Analysis

AppleJeus is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.sekoia.io/the-dprk-delicate-sound-of-cyber/

→https://brandefense.io/blog/apt-groups/lazarus-apt-group-apt38/

→https://cocomelonc.github.io/tutorial/2022/05/09/malware-pers-4.html

→https://mandiant.widen.net/s/pkffwrbjlz/m-trends-2023

→https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/lazarus-north-korea-indictment

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

AppleJeusosx.applejeuswin.applejeus

External Intelligence

Malpedia: win.applejeus

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search AppleJeus