EuRepoC
The North Korean state-sponsored hacking group Lazarus gained access into the networks of a defence contractor in Africa and stole data using the DeathNote malware beginning in July 2022 · 01.07.2022
The North Korean state-sponsored hacking group Lazarus gained access into the networks of an unspecified defence contractor in Africa and stole data beginning in July 2022, according to a technical report by Russian IT-company Kaspersky. The attack was conducted with the DeathNote malware, which was also used in prior attacks in South Korea and Latin America. One of the peculiarities of this cyber incident is the use of the ServiceMove technique, whereby the hackers leverage the Windows Perception Simulation Service to load arbitrary DLL files.