28th June – Threat Intelligence Report · 2021-06-28
A new campaign attributed to the North Korean threat group Lazarus has been discovered, in which the group utilized the NukeSped RAT, the Bundlore adware, and the ThreatNeedle Trojan.
NukeSped Copies Fileless Code From Bundlore, Leaves It Unused · 2021-06-22
While investigating samples of NukeSped, a remote access trojan (RAT), Trend Micro came across several Bundlore adware samples using the same fileless routine that was spotted in NukeSped. | From article: The backdoor has been attributed to the cybercriminal group Lazarus, which has been active since at least 2014 .