Operation Dangerous Password targeting crypto currency exchangers

Date (as written): ongoing since 2019
Year: 2019
Country: Japan
Actors (as written): Lazarus attack group (operation identified in Japan and associated with Lazarus)
Actor pages: Lazarus attack group
Tags (as written): crypto theft; social engineering; LinkedIn

Source entries (1)

JPCERT/CC Eyes blog: Beware of Contacts through LinkedIn

Operation Dangerous Password targeting crypto currency exchangers · ongoing since 2019

This operation has been ongoing since 2019, targeting crypto currency exchangers. The attackers contact employees of the target organization through LinkedIn and attempt to have them download a ZIP file and execute the malicious file inside.

https://blogs.jpcert.or.jp/en/2025/01/initial_attack_vector.html

Suggest a correction on GitHub