EuRepoC
North Korean State-Sponsored Hacking Group Lazarus Compromised Unnamed Software Vendor Starting In Mid-2022 · 01.07.2022
North Korean hacker group Lazarus has exploited known vulnerabilities in the offerings of a high-profile software vendor in an effort to attack its customers. The cybersecurity company Kaspersky first identified these attacks in mid-July and observed recurrent infection attempts against the same target continuing into mid-2023. Although the report does not specify the victims or the vulnerabilities exploited, it assesses that the North Korean threat actors used malware strains such as SIGNBT and LPEClient, with SIGNBT showing significant advances in stealth and evasion techniques.