An investigation by cybersecurity firm AhnLab shows that the Lazarus Group , based in North Korea, relied on spear-phishing throughout the past year to steal digital assets .