DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

State-sponsored North Korean hacking group Lazarus deployed newly discovered backdoor WinorDLL64 against unspecified South Korean targets since 2021

Date (as written)
01.01.2021
Year
2021
Country
Korea, Republic of
Actors (as written)
Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
Actor pages
Lazarus GroupLabyrinth ChollimaHIDDEN COBRAGuardians of PeaceDiamond Sleet fka ZINCNICKEL ACADEMYNewRomanic Cyber Army TeamWhois Hacking TeamApplewormGroup 77G0032
Tags (as written)
Hijacking without Misuse

Source entries (1)

EuRepoC

State-sponsored North Korean hacking group Lazarus deployed newly discovered backdoor WinorDLL64 against unspecified South Korean targets since 2021 · 01.01.2021
The state-sponsored North Korean hacking group Lazarus deployed the newly discovered backdoor WinorDLL64 agaonst unspecified South Korean targets since 2021, the Slovakian IT security company ESET assessed with low confidence based on the targeted region and an overlap in both behavior and code. The backdoor is deployed as a payload of the Wslink downloader ESET detected in 2021.
https://www.welivesecurity.com/2023/02/23/winordll64-backdoor-vast-lazarus-arsenal/
https://thehackernews.com/2023/02/lazarus-group-using-new-winordll64.html
https://securitymea.com/2023/02/28/apt-group-lazarus-likely-using-winordll64-backdoor-to-exfiltrate-data/

Suggest a correction on GitHub