Organizations in Japan

Date (as written): 28/02/2024
Year: 2024
Country: JP
Actors (as written): Lazarus
Actor pages: Lazarus
Tags (as written): Attack: Malware; Target Class: Multiple Industries; Attack Class: Cyber Crime; Tags: Japan, Computer Security Incident Response Team, JPCERT/CC, North Korea, Lazarus, PyPI

Source entries (2)

JPCERT/CC Eyes blog: New Malicious PyPI Packages used by Lazarus

Lazarus malicious PyPI packages (pycryptoenv, pycryptoconf, quasarlib, swapmempool) with Comebacker malware · (published February 28, 2024)

JPCERT/CC has confirmed that Lazarus has released malicious Python packages to PyPI, the official Python package repository (Figure 1). The Python packages confirmed this time are as follows: pycryptoenv pycryptoconf quasarlib swapmempool

https://blogs.jpcert.or.jp/en/2024/02/lazarus_pypi.html

Hackmageddon cyber attacks timelines (Paolo Passeri)

Organizations in Japan · 28/02/2024

Japan's Computer Security Incident Response Team (JPCERT/CC) warns that the notorious North Korean hacking group Lazarus has uploaded four malicious PyPI packages to infect developers with malware. [Date Occurred: -; Date Discovered: -]

https://www.hackmageddon.com/2024/05/30/16-29-february-2024-cyber-attacks-timeline/

https://www.bleepingcomputer.com/news/security/japan-warns-of-malicious-pypi-packages-created-by-north-korean-hackers/

Suggest a correction on GitHub