North Korea’s infamous Lazarus Group appears to be working alongside the Russian intelligence-linked threat actor Gamaredon, marking “the first known case of Russian-North Korean cyber collaboration in the wild,” according to researchers.

The two groups “may be operating on shared infrastructure,” the U.S.-Czech cybersecurity firm Gen Digital wrote in a recent report, suggesting the discovery may go beyond simple technical overlap and point to a new stage in cyber conflict where joint digital operations reflect geopolitical alliances.