Operation Blockbuster is a Novetta led coalition that analyzed the Advanced Persistent Threat adversary responsible for the devastating and destructive attack against Sony Pictures in 2014. The threat has been dubbed the Lazarus Group , and is tied to use of specific similar malicious code variants going back to 2009. The actor has been identified in attacks on government , Military , Media , Aerospace , Finance , and Critical Infrastructure victims, most of which are in the United States and South Korea . The scope of this group indicates that it is operated by a well-funded and resourced entity, not merely a hacktivist group.