### Overview
Having gained access to the SWIFT servers, the Lazarus Group began manipulating SWIFT messages to initiate fraudulent transactions. This report examines the tactics used to alter and forge SWIFT messages.

### Key Findings
- **Message Alteration**: Modified existing SWIFT messages to redirect funds to accounts controlled by the group.
- **Fake Transaction Creation**: Generated new, fraudulent messages mimicking legitimate transactions.
- **Log Tampering**: Altered system logs to cover tracks and avoid detection by bank operators.

### Implications
The manipulation of SWIFT messages was central to executing the heist, allowing the attackers to initiate unauthorized transfers totaling $951 million.