DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Undisclosed software vendor

Date (as written)
27/10/2023
Year
2023
Country
N/A
Actors (as written)
Lazarus (aka Diamond Sleet and ZINC)
Actor pages
Lazarus
Tags (as written)
Attack: Vulnerability; Target Class: Professional, scientific and technical; Attack Class: Cyber Espionage; Tags: Kaspersky, Lazarus, SIGNBT, LPEClient

Source entries (3)

ThaiCERT Threat Group Cards

A cascade of compromise: unveiling Lazarus’ new campaign · 2023-07
A cascade of compromise: unveiling Lazarus’ new campaign https://securelist.com/unveiling-lazarus-new-campaign/110888/
https://securelist.com/unveiling-lazarus-new-campaign/110888/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Undisclosed software vendor · 27/10/2023
Researchers from Kaspersky reveal that earlier in 2023, the North Korean Lazarus threat actor repeatedly compromised a software vendor with the SIGNBT and LPEClient malware, using flaws in vulnerable software. [Date Occurred: During mid-2023; Date Discovered: During mid-2023]
https://www.hackmageddon.com/2023/12/28/16-31-october-2023-cyber-attacks-timeline/
https://www.bleepingcomputer.com/news/security/lazarus-hackers-breached-dev-repeatedly-to-deploy-signbt-malware/

Kaspersky Securelist

A cascade of compromise: unveiling Lazarus’ new campaign · 2023-10-27T06:00:12
We unveil a Lazarus campaign exploiting security company products and examine its intricate connections with other campaigns
https://securelist.com/unveiling-lazarus-new-campaign/110888/

Suggest a correction on GitHub