DeathNote cluster · 01.05.2021
In 2021, two attacks were perpetrated by the Lazarus Group using an updated DeathNote cluster. The first attack targeted a think tank in South Korea and the second an IT asset monitoring vendor. Kaspersky therefore assumes that the threat actor wants to build the attack capabilities on supply chains.
Targeting of South Korean think tank · Oct 2021
Using an unusual route to gain access to civil society and government groups, North Korean hackers accessed the servers of a South Korean think tank by compromising a Latvian company providing third-party services.
South Korean think tank · 26/10/2021
Researchers from Kaspersky reveal the details of a new campaign by the Lazarus Group targeting a South Korean think tank using new variant of the BLINDINGCAN backdoor. [Date Occurred: During June 2021; Date Discovered: -]
Company developing asset monitoring solutions in Latvia · 26/10/2021
Researchers from Kaspersky reveal the details of a new campaign by the Lazarus Group targeting a company developing asset monitoring solutions in Latvia using new variant of the Copperhedge backdoor. [Date Occurred: During May 2021; Date Discovered: -]