JPCERT/CC Eyes blog: Operation Dream Job by Lazarus
Operation Dream Job by Lazarus: Torisma and LCPDot malware · (published January 26, 2021)
Torisma downloads and executes modules from external servers, and its infection spreads via malicious Word files [1] .