Lazarus APT Attacks European and Latin American Organizations using DTrack backdoor in 2022 · 01.01.2022
North Korean APT Lazarus attacked multiple entities across Europe and Latin America, including government-related institutes, IT service providers, telecommunications companies, manufacturing, etc. with the DTrack backdoor. According to Kaspersky, Lazarus uses this backdoor since 2019.
Undisclosed organization in Brazil · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
Undisclosed organization in Switzerland · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
Undisclosed organization in Germany · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
Undisclosed organization in India · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
Undisclosed organization in Italy · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
Undisclosed organization in Mexico · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
Undisclosed organization in Saudi Arabia · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
Undisclosed organization in Turkey · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
Undisclosed organization in the United States · 2022-11-15
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor.
21st November– Threat Intelligence Report · 2022-11-21
Researchers have detected modifications made to the DTrack malware, which is being utilized by the North Korean APT group Lazarus. The malware includes spying tools such as keylogging and screenshotting, and also allows injection and exfiltration of files. Recently, the group has expanded its range of operations, and has been observed targeting entities in Europe and Latin America.
Organizations in Europe and Latin America. · 15/11/2022
Researchers from Kaspersky reveal the details of the latest campaign from the North Korean group Lazarus targeting multiple organizations in Europe and America via the DTrack modular backdoor. [Date Occurred: 'Recently'; Date Discovered: 'Recently']
Dtrack malware attack · November
Annex 76: List of DPRK cyberthreat actors' malicious activities in 2022 monitored by the Panel (table row 32 of 37). RGB Unit: Lazarus Group; Case Name: Dtrack malware attack; SPH √; VAS: (blank); Publicized Month: November. (Note: RGB Reconnaissance General Bureau, SPH Significant Phishing, KAC knowledge acquisition and espionage, VAS virtual asset seizures.)
“Dtrack” backdoor targeting organizations in Europe and Latin America
Para 144: “According to a report by a cybersecurity firm, “Dtrack” backdoor malware, known to be widely used by the Lazarus Group, was deployed to target organizations in Europe and Latin America. ... Education, chemical manufacturing, governmental research centres and policy institutes, information technology service providers, utility providers and telecommunications sectors were mentioned as the main targets.”
DTrack activity targeting Europe and Latin America · 2022-11-15T10:00:28
In recent campaigns DTrack targets organizations in Europe and Latin America, and uses more delivery stages. | From article: First stage – implanted code Second stage – shellcode Third stage – shellcode and final binary Final payload Infrastructure Victims Conclusions IOCs Authors Konstantin Zykov Jornt van der Wiel Introduction DTrack is a backdoor used by the Lazarus group.