Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Lazarus"
Nation-State
Lazarus has used fake job offers in attacks targeting companies developing UAV technology, for information theft.
Nation-State
Multiple South Korean organizations across industries have been targeted in a recent Lazarus campaign dubbed Operation SyncHole.
Fraud & Identity Theft
North Korean cryptocurrency thieves abusing Zoom Remote collaboration feature to target cryptocurrency traders with malware.
Malware & Threats
The $1.4 billion ByBit cryptocurrency heist combined social engineering, stolen AWS session tokens, MFA bypasses and a rigged JavaScript file.
Cybercrime
The FBI has attributed the Bybit hack to a North Korean group named TraderTraitor as more technical details of the attack have come to...
Government
The EU has announced new sanctions against entities aiding Russia’s war against Ukraine, including an individual who leads North Korean hackers.
Cybercrime
Companies and experts have found evidence linking the $1.5 billion Bybit cryptocurrency heist to North Korean Lazarus hackers.
Data Breaches
The FBI said the target was tricked into downloading a malicious Python script under the guise of a pre-employment test hosted on GitHub.
Malware & Threats
North Korean cryptocurrency thieves caught targeting macOS with fake PDF applications, backdoors and new persistence tactics.
Nation-State
The Lazarus APT created a deceptive website that exploited a Chrome zero-day to install malware and steal cryptocurrency.
Malware & Threats
A fresh Mandiant report documents North Korea's APT45 as a distinct hacking team conducting cyberespionage and ransomware operations.
Artificial Intelligence
KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware."
Malware & Threats
North Korean group Lazarus exploited AppLocker driver zero-day CVE-2024-21338 for privilege escalation in attacks involving FudModule rootkit.
Malware & Threats
North Korean hackers have used Dlang-based malware in attacks against manufacturing, agriculture, and physical security organizations.
Cybercrime
Recorded Future calculates that North Korean state-sponsored threat actors are believed to have stolen more than $3 billion in cryptocurrency.
Malware & Threats
Google again catches a North Korean APT actor targeting security researchers with zero-days and rigged software tools.
Cyberwarfare
North Korea-linked Lazarus Group exploited a ManageEngine vulnerability to compromise an internet backbone infrastructure provider.
Cybercrime
North Korean hackers working for the government stole virtual assets last year estimated to be worth between $630 million and more than $1 billion, U.N. experts...
Nation-State
FBI says a North Korea-linked threat group known as Lazarus and APT38 is behind the $100 million Horizon bridge cryptocurrency heist.
Artificial Intelligence
Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.
Cloud Security
Vulnerabilities
Artificial Intelligence
Malware & Threats
The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware.
Management & Strategy
Vulnerabilities
